Question

I’m looking for a template engine in Java that disallow code execution in template, only tags.

In a perfect world, I would be searching for an equivalent to Jinja2 (or the Django template engine).
Based on Django, template tags will be used when created by me, but a user can’t create a template tag (by executing code).

I would implement it in the Play! Framework.

Thanks for your help!

Answer 1

StringTemplate is what you are looking for.

Its distinguishing characteristic is
that it strictly enforces model-view
separation unlike other engines.
Strict separation makes websites and
code generators more flexible and
maintainable; it also provides an
excellent defense against malicious
template authors