Revert "fix: Avoid XSS attack from Jinjin2's Environment(). (#4355)"

This reverts commit 40270e7.
feast-dev · Jul 16, 2024 · 508c97d · 508c97d
1 parent 38cae16
commit 508c97d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 6 deletions.
diff --git a/sdk/python/feast/infra/offline_stores/contrib/postgres_offline_store/postgres.py b/sdk/python/feast/infra/offline_stores/contrib/postgres_offline_store/postgres.py
@@ -365,9 +365,7 @@ def build_point_in_time_query(
     full_feature_names: bool = False,
 ) -> str:
     """Build point-in-time query between each feature view table and the entity dataframe for PostgreSQL"""
-    template = Environment(autoescape=True, loader=BaseLoader()).from_string(
-        source=query_template
-    )
+    template = Environment(loader=BaseLoader()).from_string(source=query_template)
 
     final_output_feature_names = list(entity_df_columns)
     final_output_feature_names.extend(

diff --git a/sdk/python/feast/infra/offline_stores/offline_utils.py b/sdk/python/feast/infra/offline_stores/offline_utils.py
@@ -186,9 +186,7 @@ def build_point_in_time_query(
     full_feature_names: bool = False,
 ) -> str:
     """Build point-in-time query between each feature view table and the entity dataframe for Bigquery and Redshift"""
-    template = Environment(autoescape=True, loader=BaseLoader()).from_string(
-        source=query_template
-    )
+    template = Environment(loader=BaseLoader()).from_string(source=query_template)
 
     final_output_feature_names = list(entity_df_columns)
     final_output_feature_names.extend(