jinja2 autoescape codemod should allow for setting autoescape to select_autoescape callable

[clavedeluna]

Description

• setting autoescape=select_autoescape(...) is the encouraged way in the jinja2 docs:

Intelligently sets the initial value of autoescaping based on the filename of the template. This is the recommended way to configure autoescaping if you do not want to write a custom function yourself.

• we had inadvertently flagged this as needing to change.
• It would be nice to one day be able to also not flag any callable which may return True, but that is more difficult than it sounds due to branch analysis.
• As a side thing, I noticed that we incorrectly interpreted the aiohttp_jinja2.setup default for autoescape as also being default of False, however, it's actually the secure value of True. I thought maybe that was a recent change but not so, it's been there for a while since v0.15
• So I changed the pattern for aiohttp_jinja2.setup and also allowed it to accept jinja2.select_autoescape since the docs state this is passed directly to jinja's Environment class

Closes #284

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud