Module

analysis.escape_audit

Static escape and trusted-markup audit findings.

Classes

EscapeAuditFinding 9
Machine-readable escaping and trusted-markup audit finding.

Machine-readable escaping and trusted-markup audit finding.

Attributes

Name Type Description
code Literal['K-ESC-001', 'K-ESC-002', 'K-ESC-003', 'K-ESC-004', 'K-ESC-005']
severity Literal['info', 'warning']
kind str
message str
template_name str | None
lineno int | None
col_offset int | None
expression str | None
suggestion str | None

Functions

audit_escaping 2 list[EscapeAuditFinding]
Return static escaping and trusted-markup findings for a template. This does n…
def audit_escaping(template_or_ast: Any, *, include_output_sites: bool = True) -> list[EscapeAuditFinding]

Return static escaping and trusted-markup findings for a template.

This does not change render behavior. It reports observable template facts: escaped output sites, unescaped output sites,| safeuses and review reasons, plus filters that intentionally return trusted markup.

Parameters
Name Type Description
template_or_ast Any
include_output_sites bool Default:True
Returns
list[EscapeAuditFinding]