How do I html-escape dangerous unsanitized input in jinja2?

Question

Can I do it inside the template or must it be done in python code?

I have a variable that may contain da<ngero>u&s chars. How do I escape it in jinja2?

Answer 1

e.g.

{{ user.username|e }}

Pipe it through the |e filter

Docs:

• 2.x: Jinja: Template Designer Documentation -> HTML Escaping
• 3.x: Jinja: Template Designer Documentation -> HTML Escaping