- Added Bandit test.

- Fixed single issue found (autoescaping Jinja templates).
- Added parallel pre-commit, bandit tests in TravisCI.
- Bumped patch version.

.travis.yml

 ---
 language: python
-python: ["2.7", "3.2", "3.3", "3.4", "3.5"]
+python: ["2.7", "3.2", "3.3", "3.4", "3.5", "3.6"]
 dist: trusty
 sudo: false
 cache:
@@ -9,14 +9,19 @@ matrix:
   include:
     - python: "3.5"
       env: TOXENV=docs
+    - python: "3.5"
+      env: TOXENV=bandit
+    - python: "2.7"
+      env: TOXENV=pre-commit
+    - python: "3.5"
+      env: TOXENV=pre-commit
   allow_failures:
     - python: "3.2"
 
 install:
-  - pip install tox-travis pre-commit
+  - pip install tox-travis | cat
 
 script:
-  - pre-commit run --all-files
   - tox
 
 notifications:

VERSION

-0.4.2
+0.4.3
\ No newline at end of file

template/__init__.py

@@ -12,7 +12,7 @@ import template.filters
 
 
 def render(template_string):
-    env = Environment()
+    env = Environment(autoescape=True)
     # Add all functions in template.filters as Jinja filters.
     for tf in filter(lambda x: not x.startswith('_'), dir(template.filters)):
         env.filters[tf] = template.filters.__getattribute__(tf)

tox.ini

 [tox]
-envlist = py{2,3},docs
+envlist = py{2,3}
 
 [travis]
 python =
@@ -8,6 +8,7 @@ python =
     3.3: py3
     3.4: py3
     3.5: py3
+    3.6: py3
 
 [testenv]
 basepython =
@@ -38,7 +39,17 @@ deps =
     twine
     wheel
 commands =
-    sh -c 'git tag "v$(cat VERSION)" && git push --tags'
+    sh -c 'git tag -a "v$(cat VERSION)" && git push --tags'
     sh -c 'rm -rf dist/'
     python setup.py bdist_wheel
     twine upload --skip-existing dist/*.whl
+
+[testenv:bandit]
+basepython = python
+deps = bandit
+commands = bandit --recursive ./ --exclude .tox/,build/,dist/,template.egg-info
+
+[testenv:pre-commit]
+basepython = python
+deps = pre-commit
+commands = pre-commit run --all-files