python-Jinja2

Edit Package python-Jinja2

Jinja2 is a template engine written in pure Python. It provides a Django
inspired non-XML syntax but supports inline expressions and an optional
sandboxed environment.

Refresh
Refresh
Source Files (show unmerged sources)
Filename Size Changed
jinja2-3.1.4.tar.gz 0000240245 235 KB
python-Jinja2.changes 0000029170 28.5 KB
python-Jinja2.spec 0000002480 2.42 KB
Latest Revision
Dirk Mueller's avatar Dirk Mueller (dirkmueller) committed (revision 110)
- update to 3.1.4 (bsc#1223980, CVE-2024-34064):
  * The xmlattr filter does not allow keys with / solidus, >
    greater-than sign, or = equals sign, in addition to disallowing
    spaces. Regardless of any validation done by Jinja, user input
    should never be used as keys to this filter, or must be separately
    validated first.
Comments 0
openSUSE Build Service is sponsored by