FreemarkerTemplates
class FreemarkerTemplates(configuration: Configuration, classLoader: ClassLoader = ClassLoader.getSystemClassLoader()) : Templates(source)
SECURITY: FreeMarker's default output format does not HTML-escape model values, so ${x} emits untrusted input verbatim and is XSS-vulnerable. FreeMarker does not auto-escape by default, and the Configuration is supplied by the caller — http4k cannot pick a safe default for you. Use safeConfiguration to obtain a configuration with HTML auto-escaping enabled.
Constructors
Link copied to clipboard
constructor(configuration: Configuration, classLoader: ClassLoader = ClassLoader.getSystemClassLoader())
constructor(configure: (Configuration) -> Configuration = { safeConfiguration() }, classLoader: ClassLoader = ClassLoader.getSystemClassLoader())