2f4644529c
Remove / from the list of escaped chars and add `.
...
It's probably fine not to escape /, since its only danger is in ending
entities (like &/). This isn't a problem for us, since the badChars
regex won't allow it and the & will get escaped.
It turns out ` can be used to quote attribute values in IE, so it needs
to be escaped along with " and '.
2011-05-09 15:19:23 -07:00
d109e31f62
Merge branch 'master' into fix-escaping
...
Conflicts:
lib/handlebars/utils.js
2011-05-09 14:59:51 -07:00
60040e60fb
Update specs and code so that the function passed to block helpers has the same API as regular compiled templates
2011-05-04 00:03:50 -07:00
81071dd22c
Add VERSION constant
2011-05-03 20:39:24 -07:00
5d99572006
Rename vm.js to compiler.js
2011-05-03 20:38:28 -07:00
d83e1c7484
Remove unnecessary original runtime implementation
2011-05-03 20:38:06 -07:00
201ecbd7bc
Improve Handlebars subclassability
2011-05-03 19:30:32 -07:00
9333d1210d
Add support for passing String parameters to helper
2011-05-03 19:30:32 -07:00
2615fa4bd1
Add a default helperMissing to help catch errors and restore old behavior
2011-05-03 19:30:32 -07:00
3e5bc84058
Merge pull request #69 from rgrove/allow-hyphens.
...
Allow ids to contain hyphens. Fixes #36 .
2011-05-03 19:01:37 -07:00
5d8480fa8a
Merge pull request #48 from jasondavies/master.
...
Fix multi-backslash escaping
2011-05-03 18:59:59 -07:00
b0df69ddec
add missing semicolon
2011-04-30 19:07:38 -07:00
b324d002ca
Allow ids to contain hyphens. Fixes #36 .
...
Previously, a mustache like {{foo-bar}} would generate a
parse error, which was a departure from the behavior of
other Mustache implementations.
2011-04-28 22:30:21 -07:00
b291a1ad8c
Add ", ', and / to the list of chars that need HTML escaping.
...
Previously, only < and > were escaped. This meant that any Handlebars
template that used user input in an HTML attribute value was wide open
to a trivial XSS exploit. Note that unquoted attribute values are still
open to attack, but this set of characters at least brings Handlebars in
line with other Mustache implementations and other template languages.
See the OWASP XSS prevention cheat sheet (rule #1 ) for the rationale
behind escaping these characters:
https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet
2011-04-25 11:15:53 -07:00
6a80531513
Merge branch 'master' of https://github.com/tf/handlebars.js into tf-master
2011-03-26 14:04:49 -07:00
a1b1b160cf
inserting missing return statement in unless helper (fixes issue #51 )
2011-03-09 11:51:00 +01:00
a7bb51d8a5
DRY up some code that converts program AST nodes to opcodes.
2011-03-04 15:17:32 -08:00
357710f136
Add support for block hashes and clean up mustache/program code
2011-03-04 15:10:22 -08:00
ca9b9671a5
Add Hash arguments to simple mustaches (TODO: add Hash args to block helpers)
2011-03-04 00:11:03 -08:00
e0aa705f71
Add support for hash args in the tokenizer and parser
2011-03-03 21:33:28 -08:00
0397f875c5
Merge branch 'master' of http://github.com/wycats/handlebars.js
2011-02-28 22:23:11 +00:00
2cf88d4e77
Fix backslash escaping
2011-02-28 22:23:02 +00:00
32d7e52182
Helpers take precedence over context properties with the same name. This is useful in scenarios where your context object is inherited from another system (such as a framework or JSON API) that may contain properties that conflict with helpers you explicitly define.
2011-02-25 23:01:11 -08:00
2b319bef2f
Make the function passed to a block helper have an identical signature to top-level template methods
2011-02-14 16:05:01 -08:00
d7f93c09e7
Subclasses should be able to replace the compiler - this is needed so that child views are compiled using the updated semantics of the parent compiler
2011-02-11 20:11:52 -08:00
299a0e81e3
data is passed to block helpers
2011-02-11 20:11:23 -08:00
88e7003331
* Added a few public API methods to JavaScriptCompiler.prototype, so it can be subclassed.
...
* made it possible to define an alternate name lookup scheme (so that {{foo}} does not have to be
context.foo, but can instead be something like context.get('foo'))
* made it possible to substitute an alternate buffer instead of the default empty String and override how
the compiled template appends to the buffer
* Added the concept of template-local data. In order to enable template-local data, pass true
as the second parameter to the template compiler. Then, pass in the data as the fourth
parameter (context, helpers, partials, data). These signatures may change before the 1.0 release.
2011-02-11 17:03:12 -08:00
2eb1b30870
Merge branch 'master' of github.com:wycats/handlebars.js
2011-02-10 06:27:12 -05:00
40dd2c9750
Updated if helper - missed it in the last cleanup. It no longer supports methods as arguments.
2011-02-10 06:27:03 -05:00
aaaafb4400
Makes Handlebars work in contexts without a global object (node)
2011-02-08 14:31:09 -08:00
ac4d34dbe3
Backed out function helpers.
2011-01-25 21:21:57 -05:00
116a8a5202
Merge branch 'master' of https://github.com/gixug/handlebars.js into gixug-master
2011-01-25 19:59:34 -05:00
ea553b511b
IE 7 hates trailing commas
2011-01-25 10:24:53 -08:00
ada5a95f9c
improved "with" and "each" helpers to support function as argument
2011-01-23 11:55:48 +02:00
65b421ee4d
Merged
2011-01-22 10:30:44 -05:00
8ab1ffae17
Use prototype toString method to avoid native types being returned.
...
* For example, mozilla returns [xpconnect native prototype wrapper] vs [object Function]
2011-01-17 15:42:27 -08:00
b7c649617b
noop should return an empty String, not undefined
2011-01-11 23:16:03 -08:00
1974aa5277
If the partial is not found, an exception should be thrown
2010-12-29 19:23:23 -08:00
e20c57c9b2
Move compile to the right spot
2010-12-29 19:09:55 -08:00
5170e1459f
Don't need runtime anymore for normal operation
2010-12-29 18:34:13 -08:00
bf6c74aa83
Restructure things more simply
2010-12-29 18:21:43 -08:00
9a1d7c018d
Make {{#if foo}} handle empty Arrays
2010-12-28 15:47:15 -08:00
0da3065987
Clean up after-effects of Jison fix
2010-12-28 15:46:26 -08:00
b319730031
improved "if" helper to support function as argument
2010-12-28 13:37:42 +02:00
72fa62529e
Merge branch 'master' of https://github.com/zaach/handlebars.js into zaach-master
2010-12-27 13:02:20 -08:00
16ed2cd3f1
Refactoring and performance enhancements on the VM compiler
2010-12-21 09:47:27 -08:00
d87ae129c0
Add a #with helper
2010-12-21 09:47:01 -08:00
8fccd21283
escapeExpressions should return "" for falsy values
2010-12-21 09:46:50 -08:00
e0246d7dfc
#each should handle undefined or null values
2010-12-21 09:46:22 -08:00
fc0d721b96
Use pluggable logger rather the puts
2010-12-21 09:45:59 -08:00
Ryan Grove
tomhuda
Yehuda Katz
Andrew Benton
Tim Fischbach
Jason Davies
Alan Johnson
David Stone
Raimonds Simanovskis
Alex Stupka