> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit

<AccordionGroup>
  <Accordion title="missing-autoescape-disabled">
    Detected a Jinja2 environment without autoescaping. Jinja2 does not autoescape by default. This is dangerous if you are rendering to a browser because this allows for cross-site scripting (XSS) attacks. If you are in a web context, enable autoescaping by setting 'autoescape=True.' You may also consider using 'jinja2.select\_autoescape()' to only enable automatic escaping for certain file extensions.<br />**Likelihood**: LOW<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-116: Improper Encoding or Escaping of Output
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>

  <Accordion title="incorrect-autoescape-disabled">
    Detected a Jinja2 environment with 'autoescaping' disabled. This is dangerous if you are rendering to a browser because this allows for cross-site scripting (XSS) attacks. If you are in a web context, enable 'autoescaping' by setting 'autoescape=True.' You may also consider using 'jinja2.select\_autoescape()' to only enable automatic escaping for certain file extensions.<br />**Likelihood**: LOW<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-116: Improper Encoding or Escaping of Output
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>
</AccordionGroup>