'Returns a list of unsafe expressions.
At this time all expressions that are unescaped are considered unsafe.
Arguments:
underscore_template: The contents of the Underscore.js template.
Returns:
A list of Expressions.'

def _find_unescaped_expressions(self, underscore_template):

    unescaped_expression_regex = re.compile('<%=.*?%>', re.DOTALL)
    expressions = []
    for match in unescaped_expression_regex.finditer(underscore_template):
        expression = Expression(match.start(), match.end(), template=underscore_template, start_delim='<%=', end_delim='%>')
        expressions.append(expression)
    return expressions
