{# About page. Phase 2: body comes from the ``pages`` row with slug='about', rendered via the Markdown pipeline (markdown-it-py → bleach allowlist) at write time and cached on the row. The cached HTML has already been sanitized against an allowlist that forbids scripts, styles, iframes, etc., so it is safe to emit with the ``| safe`` filter (Jinja autoescape is explicitly disabled for the body only). Head Hen edits this content through the Phase 4 admin. Per CLAUDE.md, the physical address is not shown anywhere on the site — only the town name. Context: - page : app.models.entities.Page - active_nav : str "about" #} {% extends "public/base.html" %} {% block title %}{{ page.title }} — Chicken Babies R Us{% endblock %} {% block meta_description %}About Chicken Babies R Us — a small family farm in Morrison, Tennessee raising chickens, ducks, and geese.{% endblock %} {% block content %}

{{ page.title }}

{# body_html_cached is the output of the bleach-sanitized Markdown pipeline. It contains only tags / attributes / protocols from our allowlist (p, strong, em, a, ul, ol, li, h1-h4, blockquote, code, pre, img, hr + href/src/etc.), so rendering with ``| safe`` does not reintroduce XSS risk. #} {{ page.body_html_cached | safe }}
{% endblock %}