mcp-server-semgrep/semgrep-rules/python/flask/security/xss/audit/template-autoescape-off.html

MCP Server for Semgrep Integration - static code analysis with AI

<h4>From: {{ from_email }}</h4>
<h4>To:
    {% for recipient in recipients %}
    {{ recipient }}&nbsp;
    {% endfor %}
</h4>
<h4>Subject: {{subject}}</h4>
<div class="email-html" style="display: block;">
    <!-- ruleid: template-autoescape-off -->
    {% autoescape false %}
    {{ html_message }}
    {% endautoescape %}

    <!-- ruleid: template-autoescape-off -->
    {%      autoescape       false         %}
    {{ html_message }}
    {% endautoescape %}

    <!-- ruleid: template-autoescape-off -->
    {%autoescape false%}
    {{ html_message }}
    {% endautoescape %}

    <!-- ruleid: template-autoescape-off -->
    {%autoescape false %}
    {{ html_message }}
    {% endautoescape %}
</div>
<div class="email-text" style="display: none;">
    <pre>{{ body }}</pre>
</div>
<hr>