Question

I need the html returned using render_to_response to be escaped.
I am unable to find any suitable documentation. Can someone point in some direction ?

the code is :

return render_to_response(template_name, {return render_to_response(template_name, {
            'form': form,
            redirect_field_name: redirect_to,
            'site': current_site,
            'site_name': current_site.name,
        }, context_instance=RequestContext(request))

Here I need the response html text to be escaped.
I way I know is reading template file in string and escaping it with re.escape() and then rendering it.
whats a cleaner and simpler way to do that ??

Answer 1

String passed from the views to the templates via render_to_response are escaped by default.

See: http://docs.djangoproject.com/en/dev/topics/templates/#id2

By default in Django, every template automatically escapes the output of every variable tag. Specifically, these five characters are escaped:

< is converted to &lt;
> is converted to &gt;
' (single quote) is converted to &#39;
" (double quote) is converted to &quot;
& is converted to &amp;

Again, we stress that this behavior is on by default.