Jinja2 autoescape plugin need to be updated

[ericwb]

The Jinja2 autoescape check doesn't work with the new suggested way of escaping as described here:

http://jinja.pocoo.org/docs/2.9/api/

An example of a safe way to escape is selectively for html and xss:

env = Environment(
loader=PackageLoader('yourapplication', 'templates'),
autoescape=select_autoescape(['html', 'xml'])
)

We should update the Bandit plugin to not flag people following the Jinja directions.

[andi1984]

@ericwb Why is this issue closed? I ran in the same kind of issue…

[ericwb]

@andi1984 This issue was a result of a bad script to migrate bugs from launchpad to Github. It was already fixed in the openstack git repo.

See:
https://bugs.launchpad.net/bandit/+bug/1684249
https://review.openstack.org/#/c/488939/

Also here:
8f1b50b