Literal HTML in Django without using a variable?

Question

I've got a bunch of HTML:

<div align="center" id="whatever">
<a href="http://www.whatever.com" style="text-decoration:none;color:black">
<img src="http://www.whatever.com/images/whatever.jpg" />
</a></div>

I want to output it all as literal HTML in the browser, i.e. display the above to the user. (EDIT: unfortunately I don't have access to Django variables in my template, due to the quirks of the system I'm working on, so I can't use {{ | escape }}.

Is there any way to do this, either using Django template tags or a special HTML tag, without having to HTML-escape it all by hand?

Thanks!

Jim · Accepted Answer · 2011-02-18 15:09:48Z

3

If the HTML has to be included in the template itself, you can use the filter block:

{% filter force_escape %}
    <div align="center" id="whatever">
    <a href="http://www.whatever.com" style="text-decoration:none;color:black">
    <img src="http://www.whatever.com/images/whatever.jpg" />
    </a></div>
{% endfilter %}

Documentation

answered Feb 18, 2011 at 15:09

Jim

74.1k15 gold badges105 silver badges114 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Yuji 'Tomita' Tomita · Accepted Answer · 2011-02-18 15:08:26Z

1

You can always just escape it yourself if you don't wan't to do it in the template and it's somehow not escaped (let's just say the template author used {{ var|safe }})

from django.utils.html import escape

escaped_html = escape(my_html)

answered Feb 18, 2011 at 15:08

Yuji 'Tomita' Tomita

119k32 gold badges287 silver badges247 bronze badges

1 Comment

Yuji 'Tomita' Tomita Over a year ago

PS: I see now, I somehow read that you don't have access to the template, not that you don't have access to variables in the template.

David Wolever · Accepted Answer · 2011-02-18 15:24:42Z

0

Yup, just use the escape filter:

{{my_html|escape}}

Edit: force_escape:

{% filter force_escape %}
   ... your HTML to be escaped ...
{% endfilter %}

Or, from Python:

from django.utils.html import escape
escaped_html = escape(html_to_escape)

edited Feb 18, 2011 at 15:24

answered Feb 18, 2011 at 15:00

David Wolever

156k94 gold badges365 silver badges514 bronze badges

3 Comments

AP257 Over a year ago

Sorry - due to the quirks of the particular system I'm working with, I don't actually have the ability to put variables in the Django template. I could escape the entire string, but it's kinda long. Is there any other way?

Jim Over a year ago

That's a no-op under normal conditions. As AndiDog says in his answer, Django auto-escapes by default. It has done since before 1.0 was released.

David Wolever Over a year ago

Ah, well, in that case, use the force_escape filter (see edits).

AndiDog · Accepted Answer · 2011-02-18 15:04:24Z

0

Django defaults to auto-escape context variables when inserting them (see also the documentation). So unless you marked the variable as safe, or use the autoescape off template tag, just use {{ contextVariable }}.

answered Feb 18, 2011 at 15:04

AndiDog

70.6k21 gold badges166 silver badges208 bronze badges

Collectives™ on Stack Overflow

Literal HTML in Django without using a variable?

4 Answers 4

Comments

1 Comment

3 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

Comments

1 Comment

3 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related