test: safe_render

frappe/tests/test_website.py

@@ -280,6 +280,16 @@ class TestWebsite(unittest.TestCase):
 
 		frappe.flags.force_website_cache = False
 
+	def test_safe_render(self):
+		content = get_response_content('/_test/_test_safe_render_on')
+		self.assertNotIn("Safe Render On", content)
+		self.assertIn("frappe.exceptions.ValidationError: Illegal template", content)
+
+		content = get_response_content('/_test/_test_safe_render_off')
+		self.assertIn("Safe Render Off", content)
+		self.assertIn("test.__test", content)
+		self.assertNotIn("frappe.exceptions.ValidationError: Illegal template", content)
+
 
 def set_home_page_hook(key, value):
 	from frappe import hooks

frappe/www/_test/_test_safe_render_off.html

@@ -0,0 +1,7 @@
+---
+title: Safe Render Off
+safe_render: false
+---
+
+<div>{{ title }}</div>
+<div>test.__test</div>

frappe/www/_test/_test_safe_render_on.html

@@ -0,0 +1,6 @@
+---
+title: Safe Render On
+---
+
+<div>{{ title }}</div>
+<div>test.__test</div>