Help Center

Models

Bugfixes / Misc

Features

Token

Characters

veniceai

New Submission

Backlog

In Review

Planned

Up next

In Progress

Completed

Rejected

High Priority

Low Priority

New Model

Chat

History

Image

Support

Web Search

Backup / Sync

Staking Contract

Voice

Points

Settings

Code

Folders

Payment

Video

UI Design

Stickers

Merchandise

Censorship

Context Window

Social

Enhance Prompt

Plugin

File Upload

Upscale/Enhance

Edit Prompt

Language

Privacy

Venice Pro

System Prompts

Vision

LoRAs

Image Editing

Memory

Social Feed

Artifacts

Auto Mode

Blog

Incentive Fund

Agents

Model Deprecation

Credits

Library

Projects

Marketing

<p>Here’s what Venice is working on next!</p>

Next up

Roadmap

<p>All completed and shipped community requested feature requests and improvements can be seen here.</p>

Done

Shipped Features

Hey {name|there}! 👋

<p>Currently, user-provided input is being rendered directly inside a server-side template powered by Jinja2. This allows template expressions to be evaluated instead of treated as plain text.</p><img data-width="100%" data-align="left" alt="" data-featurebase-content-key="67858a37d649181b48addc17/post/69f3c1e34c56482a404f5de1/019de02c-8240-7ade-b0f5-dabf8c2b4ad4/b64u-V2hhdHNBcHAgSW1hZ2UgMjAyNi0wNS0wMSBhdCAyLjIyLjE5IEFNLmpwZWc.jpeg" data-featurebase-content-filename="WhatsApp Image 2026-05-01 at 2.22.19 AM.jpeg" src="https://67858a37d649181b48addc17.featurebase-attachments.com/c/post/69f3c1e34c56482a404f5de1/019de02c-8240-7ade-b0f5-dabf8c2b4ad4/b64u-V2hhdHNBcHAgSW1hZ2UgMjAyNi0wNS0wMSBhdCAyLjIyLjE5IEFNLmpwZWc.jpeg?X-Amz-Expires=3600&amp;X-Amz-Date=20260520T220000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260520%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=98165ff066ee24861a9ab94e28f9d0f6e808e6bb81a7f76402dbef551546e763"><p></p>

<p>Derzeit werden vom Benutzer eingegebene Daten direkt in einer serverseitigen Vorlage gerendert, die auf Jinja2 basiert. Dadurch können Vorlagenausdrücke ausgewertet werden, anstatt als reiner Text behandelt zu werden.</p><img data-width="100%" data-align="left" alt="" data-featurebase-content-key="67858a37d649181b48addc17/post/69f3c1e34c56482a404f5de1/019de02c-8240-7ade-b0f5-dabf8c2b4ad4/b64u-V2hhdHNBcHAgSW1hZ2UgMjAyNi0wNS0wMSBhdCAyLjIyLjE5IEFNLmpwZWc.jpeg" data-featurebase-content-filename="WhatsApp Image 2026-05-01 at 2.22.19 AM.jpeg" src="https://67858a37d649181b48addc17.featurebase-attachments.com/c/post/69f3c1e34c56482a404f5de1/019de02c-8240-7ade-b0f5-dabf8c2b4ad4/b64u-V2hhdHNBcHAgSW1hZ2UgMjAyNi0wNS0wMSBhdCAyLjIyLjE5IEFNLmpwZWc.jpeg?X-Amz-Expires=3600&amp;X-Amz-Date=20260520T220000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260520%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=98165ff066ee24861a9ab94e28f9d0f6e808e6bb81a7f76402dbef551546e763"><p></p>

Serverseitige Template-Injektion bei der Darstellung von Benutzereingaben <h1>z</h1>

<p>Actualmente, los datos introducidos por el usuario se representan directamente dentro de una plantilla del lado del servidor basada en Jinja2. Esto permite que las expresiones de la plantilla se evalúen en lugar de tratarse como texto sin formato.</p><img data-width="100%" data-align="left" alt="" data-featurebase-content-key="67858a37d649181b48addc17/post/69f3c1e34c56482a404f5de1/019de02c-8240-7ade-b0f5-dabf8c2b4ad4/b64u-V2hhdHNBcHAgSW1hZ2UgMjAyNi0wNS0wMSBhdCAyLjIyLjE5IEFNLmpwZWc.jpeg" data-featurebase-content-filename="WhatsApp Image 2026-05-01 at 2.22.19 AM.jpeg" src="https://67858a37d649181b48addc17.featurebase-attachments.com/c/post/69f3c1e34c56482a404f5de1/019de02c-8240-7ade-b0f5-dabf8c2b4ad4/b64u-V2hhdHNBcHAgSW1hZ2UgMjAyNi0wNS0wMSBhdCAyLjIyLjE5IEFNLmpwZWc.jpeg?X-Amz-Expires=3600&amp;X-Amz-Date=20260520T220000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260520%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=98165ff066ee24861a9ab94e28f9d0f6e808e6bb81a7f76402dbef551546e763"><p></p>

Inyección de plantillas del lado del servidor en la visualización de datos introducidos por el usuario <h1>z</h1>

Server-Side Template Injection in user input rendering <h1>z</h1>

Gobesh Basumatary

Venice.ai

Server-Side Template Injection in user input rendering <h1>z</h1>

Subscribe to post

Subscribe to post