Disable contextual autoescaping of Soy templates Contextual autoescaping is considered deprecated by the Soy team, as it makes it too easy to turn off autoescaping. Instead, use the new "strict" mode, which disallows directives like |noAutoescape and |id. This is safe for us as we weren't using them in any meaningful way anyway. Change-Id: I687e345c90aa38af6b0b936b8b5b5e5fe86f4ed8
diff --git a/gitiles-servlet/src/main/resources/com/google/gitiles/templates/RepositoryIndex.soy b/gitiles-servlet/src/main/resources/com/google/gitiles/templates/RepositoryIndex.soy index cdd5005..10414a5 100644 --- a/gitiles-servlet/src/main/resources/com/google/gitiles/templates/RepositoryIndex.soy +++ b/gitiles-servlet/src/main/resources/com/google/gitiles/templates/RepositoryIndex.soy
@@ -11,7 +11,7 @@ // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. -{namespace gitiles autoescape="contextual"} +{namespace gitiles autoescape="strict"} /** * Index page for a repository.