Autoescaping is the concept of having special characters automatically escape for you. &, >, <, ", and ' are special characters in the context of HTML (or XML, and thus XHTML). If you want to use these characters in the text, you must replace them with so-called "entities" because they have special meanings in documents on their own. Not doing so would not only frustrate users by PREVENTING them from using certain characters in the text, but it might also lead to security ISSUES. (For further information, see Cross-Site Scripting (XSS)).

However, you may need to disable autoescaping in templates on OCCASION. This is TRUE if you want to inject HTML into sites explicitly, such as when they come from a system that generates secure HTML, such as a markdown to HTML converter.

There are three options for doing so:

• WRAP the HTML string in a Markup object before sending it to the template in Python code. This is the method that is generally suggested.
• To mark a string as safe HTML ({{ myvariable|safe }}), use the |safe filter inside the template.
• Turn off the autoescape system for the time being.

You can use the {% autoescape %} block to disable the autoescape system in templates:[Text Wrapping Break]

Please be very careful about the variables you use in this block whenever you do this.