1{{ "<script>alert('xss');</script>" }} 2{% autoescape true %} 3{{ "<script>alert('xss');</script>" }} 4{% endautoescape %} 5{% autoescape false %} 6{{ "<script>alert('xss');</script>" }} 7{% endautoescape %} 8{% autoescape false %} 9{{ "<script>alert('xss');</script>"|escape }} 10{% endautoescape %}