Function _safe_render

servers/prompt/src/prompt.py:74–95

Safely render a template with escaped user inputs. Args: template: Jinja2 Template object **kwargs: Template variables (will be escaped if strings) Returns: Rendered template string

(template: Template, **kwargs: Any)

def _safe_render(template: Template, **kwargs: Any) -> str:
    """Safely render a template with escaped user inputs.
    
    Args:
        template: Jinja2 Template object
        **kwargs: Template variables (will be escaped if strings)
        
    Returns:
        Rendered template string
    """
    # Escape all string inputs to prevent XSS and injection
    safe_kwargs = {}
    for key, value in kwargs.items():
        if isinstance(value, str):
            safe_kwargs[key] = escape(value)
        elif isinstance(value, list):
            # Escape string items in lists
            safe_kwargs[key] = [escape(str(item)) if isinstance(item, str) else item for item in value]
        else:
            safe_kwargs[key] = value
    
    return template.render(**safe_kwargs)


@app.prompt(output="q_ls,template->prompt_ls")