Page History

The 

• user (

  Javadoc resource link
  className info.magnolia.cms.security.User renderType asynchronous

  )

• locale (java.util.Locale)

  Info
  Please note that ${ctx.locale} is different from ${cmsfn.language()}, the former referring to the locale currently used by the user, the latter to the locale currently used by the site. See also AdminCentral and public locales.

In addition, 

• aggregationState (

  Javadoc resource link
  className info.magnolia.cms.core.AggregationState renderType asynchronous

  )
• contextPath (current context path)
• request (javax.servlet.http.HttpServletRequest)

Any ctx attributes (request, session or application scoped) listed under config:server/rendering/engine/protectedAttributes are not exposed (unconfigured attributes default to that list). You can customize the list by importing and adjusting the default config.server.rendering.engine.protectedAttributes.yaml.

'protectedAttributes':
  'servletContext': 'servletContext'
  'javax.security.auth.Subject': 'javax.security.auth.Subject'
  'com.vaadin.server.VaadinSession.Admincentral': 'com.vaadin.server.VaadinSession.Admincentral'

WebContext properties are null if the execution is not a Web page request.