{# FIXED: autoescaping is on for .html templates, so every {{ }} escapes & < > " and '; links are limited to http and https. #} Profile
{# snippet:begin render #} {{ name }}

{{ name }}

{{ bio }}

{# snippet:end render #} {# snippet:begin url #} {# Escaping cannot make a URL safe: javascript:alert(1) has nothing to escape. Link only to http and https URLs. #} {% if website.startswith(("https://", "http://")) %} Website {% endif %} {# snippet:end url #}