Home/ Questions/Q 6227333
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-24T09:11:43+00:00

I am handling with a Wikipedia-like project. I can convert the text file to

  • 0

I am handling with a Wikipedia-like project. I can convert the text file to html code using the markdown. My problem is, I want to render this html code in a html file. Here is my code,

class articles:
    def GET(self):
        form_name=web.input()
        article_name=form_name.page
        article_file_path=os.path.join('articles',article_name)
        fp = open(article_file_path,'rU')
        text = fp.read()
        body = markdown2.markdown(text)
        return render.article_files(article_name, body)

I’m passing article_name and body(html code) to article_files.html. The body looks like,

<h1>Hai</h1>
<p>Welcome<em>Ajay</em></p>

The problem is, the body displays as it is. That is the html code is printed in the screen with all tags. I want to render this html code (body) like,

Hai
Welcome Ajay

My HTML file is:

$def with(title,content)
<html>
<head>
<title>$title</title>
</head>
<body>
    <form name="form" method="GET">
        $content
    </form>
</body>
</html>
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    HTML escaping is on by default in web.py templates. To turn it off, prepend the variable name with a colon:

    <form name="form" method="GET">
    $:content
</form>

    Make sure there is no way for a potentially malicious user to feed arbitrary HTML into your unescaped templates.

    • 0