mcp-server-semgrep/semgrep-rules/python/django/security/audit/xss/template-blocktranslate-no-escape.html

MCP Server for Semgrep Integration - static code analysis with AI

<title>
<!-- ruleid: template-blocktranslate-no-escape -->
{% blocktranslate %}
Hello world
{% endblocktranslate %}
</title>

<div>
<!-- ruleid: template-blocktranslate-no-escape -->
{% blocktrans %}Foo bar{% endblocktrans %}
</div>

<div>
{% filter force_escape %}
    <!-- ok: template-blocktranslate-no-escape -->
    {% blocktranslate %}Foo bar{% endblocktranslate %}
{% endfilter %}
</div>