The contained python expression is executed at render-time and has access to all keyword arguments passed to the SimpleTemplate.render() method. HTML special characters are escaped automatically to prevent XSS attacks. You can start the expression with an exclamation mark to disable escaping for that expression:

>>> template('Hello {{name}}!', name='<b>World</b>')
u'Hello &lt;b&gt;World&lt;/b&gt;!'
>>> template('Hello {{!name}}!', name='<b>World</b>')
u'Hello <b>World</b>!'

static_files (css, images,...)
from bottle import static_file
@route('/images/<filename:re:.*\.png>')
def send_image(filename):
   return static_file(filename, root='/path/to/image/files', mimetype='image/png')

@route('/static/<filename:path>')
def send_static(filename):
   return static_file(filename, root='/path/to/static/files')

pour l'authentification avec Bottle : http://cork.firelet.net/
merci Max ;-)