diff --git a/docs/ref/templates/builtins.txt b/docs/ref/templates/builtins.txt index 01f49714f0..5f04c3d5e1 100644 --- a/docs/ref/templates/builtins.txt +++ b/docs/ref/templates/builtins.txt @@ -1683,6 +1683,16 @@ safe Marks a string as not requiring further HTML escaping prior to output. When autoescaping is off, this filter has no effect. +.. note:: + + If you are chaining filters, a filter applied after ``safe`` can + make the contents unsafe again. For example, the following code + prints the variable as is, unescaped: + + .. code-block:: html+django + + {{ var|safe|escape }} + .. templatefilter:: safeseq safeseq