refactor: document content|safe safety invariant in templates

Add comments explaining why the |safe filter is used in data.html and
stats.html — content is always pre-rendered HTML from render_template().
This commit is contained in:
Jon Seager 2026-02-13 15:11:36 +00:00
parent 31cb7c6c71
commit 36e2d90ee8
No known key found for this signature in database
2 changed files with 2 additions and 0 deletions

View file

@ -20,6 +20,7 @@
/>
</div>
{# Safety: content is always pre-rendered from another Askama template via render_template() #}
<div id="data-content" class="data-page-content">{{ content|safe }}</div>
</div>

View file

@ -27,6 +27,7 @@
<div class="flex flex-col gap-6">
{% include "partials/tab_bar.html" %}
{# Safety: content is always pre-rendered from another Askama template via render_template() #}
<div id="stats-content">{{ content|safe }}</div>
</div>