Tag

autoescaping

Safeguard articles tagged "autoescaping" — guides, analysis, and best practices for software supply chain and application security.

1 article

Application Security

CVE-2024-22195: how Jinja2's xmlattr filter opened an XSS hole

A single filter in Jinja, xmlattr, could inject arbitrary HTML attributes and slip past autoescaping entirely — fixed in Jinja 3.1.3, tracked as CVE-2024-22195.

Jul 7, 20266 min read