Hi all,
Does anyone know of a straightforward way to create an independent template
engine instance with a subset of the tags/filters/etc. defined?
The use-case is for allowing user-supplied template content, while
preventing said users from being able to use features that could be
dangerous, leak information, etc.. (Eg. {% extends %}, {% load %},
{{my-secret-variable-that-is-loaded-into-global-context}})
Kind Regards,
Michael
--
You received this message because you are subscribed to the Google Groups
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-users/e8456f7f-e52f-4bf4-95c6-419d84600687o%40googlegroups.com.
