Skip to main content
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Feike_Visser1
Feike_Visser1Accepted solution
Adobe Employee
Oct 16, 2015 2:29 AM UTC

${ yourValue @ context='unsafe'} will unescape.

Avoid using this to not introduce XSS issues.

3 replies

knicksak2
Level 2
Oct 16, 2015 2:29 AM UTC

What Feike said was correct however by using context='unsafe' you are disabling escaping and XSS protection completely. By using context='html' it filters the HTML to meet the AntiSamy policy rules, removing what doesn't match the rules. By doing this you still have some XSS protection instead of disabling it completely.

Translate
WhoaShekhar
Level 10
Oct 16, 2015 2:29 AM UTC

Hi There,

Thank you for reaching out to Adobe Community.

Please go through the below link to see if it helps:

http://docs.adobe.com/content/docs/en/aem/6-0/develop/sightly.html

This is the entire documentation for sightly.

thanks!

Translate
Feike_Visser1
Adobe Employee
Feike_Visser1Adobe EmployeeAccepted solution
Adobe Employee
Oct 16, 2015 2:29 AM UTC

${ yourValue @ context='unsafe'} will unescape.

Avoid using this to not introduce XSS issues.

Translate