c958cc8955
v4.3.4
2019-09-28 13:25:05 +02:00
b250b2d53a
Update release notes
2019-09-28 13:24:18 +02:00
ff4d827c09
fix: harden "propertyIsEnumerable"-check
...
- "container" is an internal object that is most likely
not accessible through templateing (unlike the proto of "Object", which might be.)
In order to prevent overriding this method, we
use "propertyIsEnumerable" from the constructor.
2019-09-28 10:36:49 +02:00
e4738491b3
v4.3.3
2019-09-27 07:46:55 +02:00
54f7e11b28
Update release notes
2019-09-27 07:46:12 +02:00
8742bde701
fix test case for browsers that do not support __defineGetter__
2019-09-27 00:09:04 +02:00
2357140c68
v4.3.2
2019-09-26 23:58:48 +02:00
c5cbeac039
Update release notes
2019-09-26 23:58:13 +02:00
213c0bbe3c
Use Object.prototype.propertyIsEnumerable to check for constructors
...
- context.propertyIsEnumerable can be replaced
via __definedGetter__
- This is a fix specific to counter a known RCE exploit.
Other fixes will follow.
closes #1563
2019-09-26 23:55:24 +02:00
050cca0866
v4.3.1
2019-09-25 00:32:32 +02:00
2d5579078b
Update release notes
2019-09-25 00:31:48 +02:00
e3639e2407
fix saucelabs tests (internet explorer)
2019-09-25 00:18:02 +02:00
c2a17c7b30
fix saucelabs tests (internet explorer)
2019-09-25 00:00:51 +02:00
1266838829
do not break on precompiled templates from Handlebars >=4.0.0 <4.3.0
...
- The version-range above have compiler version 7 and
precompiled templates expecte the (block)
HelperMissing-functions in "helpers" and not in "container.hooks".
- Handlebars now accepts precompiled templates of version 7.
- If a precompiled template with version 7 is loaded,
the (block)HelperMissing-functions are kept in "helpers"
2019-09-24 23:45:09 +02:00
64ecb9ea84
add test for #1560
2019-09-24 22:28:52 +02:00
93444c58db
Ensure allowCallsToHelperMissing runtime option is optional in typings
2019-09-24 22:27:16 +02:00
d148d7cb1f
check "allowCallsToHelperMissing"
2019-09-24 08:37:37 +02:00
a89081d440
v4.3.0
2019-09-24 08:04:35 +02:00
bba65605b1
Update release notes
2019-09-24 08:03:52 +02:00
06b7224ed9
adjust compiler revision
2019-09-24 07:31:19 +02:00
2078c727c6
Disallow calling "helperMissing" and "blockHelperMissing" directly
...
closes #1558
2019-09-24 07:31:19 +02:00
fff3e40402
v4.2.1
2019-09-20 19:40:48 +02:00
35bcd4405f
Update release notes
2019-09-20 19:40:10 +02:00
00b4f2ff98
Fix some small typos.
2019-09-20 19:01:03 +02:00
e47b5ec192
integration-tests for various webpack-scenarios
...
related to #1553
- registering helpers on an instance retrieved via
`import`, compiling the template on an instance
retrieved via `require`
- using `@roundingwellos/babel-plugin-handlebars-inline-precompile` to load plugins inline
2019-09-20 18:58:17 +02:00
c55a7bed78
fix: use cjs for browser fields
...
We should not be using pre-built files for the `browser`. Resolves https://github.com/wycats/handlebars.js/issues/1553
2019-09-20 18:54:42 +02:00
164c7ceea4
v4.2.0
2019-09-03 21:58:07 +02:00
6ab48d8def
Update release notes
2019-09-03 21:57:30 +02:00
8ac20285f6
Merge pull request #1534 from AndrewLeedham/4.x
...
Add VM TS mapping
2019-09-03 21:45:31 +02:00
888750ec27
fix typings of resolvePartial-options
...
- derived from the object structure seen in the debugger
closes #1534
2019-09-03 21:40:21 +02:00
133b96a2ff
Add "Handlebars.VM.resolvePartial" to type definitions
...
- Handlebars.VM is actually not part of the API,
but Handlebars.VM.resolvePartial is mentioned
in the documentation and is thus now treated
as part of the API.
Closes #1534
2019-09-03 21:33:35 +02:00
f119497312
chore: attempt to fix saucelabs problems with custom lib
...
- custom "grunt-saucelabs"
- which uses custom "sauce-tunnel"
- which uses current "sauce connect proxy"
2019-08-31 23:58:21 +02:00
62b64ecc3d
chore: add comment to integration test
2019-08-31 23:53:28 +02:00
a57b6824e0
add webpack test
2019-08-31 21:00:14 +02:00
a26633f204
chore: fix integration tests
2019-08-31 19:27:11 +02:00
f9cce4dd02
chore: add framework for various integration tests
2019-08-31 13:18:47 +02:00
16572cd848
feat: enhance typescript definition for knownHelpers
...
- Add support for custom helpers while keeping
the list of builtin-helpers to maintain for
autocompletion support
closes #1544
2019-08-29 22:53:09 +02:00
f98c6a5425
v4.1.2-0
2019-08-25 18:06:35 +02:00
fde409ace6
Update release notes
2019-08-25 18:05:56 +02:00
9aaace76dc
Merge pull request #1540 from ouijan/browser-resolution
...
added browser to package.json, resolves #1102
2019-08-25 17:48:26 +02:00
5eb59a5302
added browser to package.json, resolves #1102
2019-08-22 10:36:13 +10:00
10b5fcf92e
v4.1.2
2019-04-13 16:19:22 +02:00
dd0144c771
Update release notes
2019-04-13 16:18:37 +02:00
594f1e30dd
chore: add missing typescript dependency, add package-lock.json
...
I suspect that the current problems with
saucelabs are due to a change transitive
dependency, but I'm not sure. I'm not
adding the package-lock.json to ensure
that this does not happen in the future.
2019-04-13 16:04:43 +02:00
871acccbb1
test: remove safari from saucelabs
2019-04-13 15:55:52 +02:00
cd38583216
fix: prevent RCE through the "lookup"-helper
...
- The "lookup" helper could also be used to run a remote code execution
by manipulating the template. The same check as for regular
path queries now also is done in the "lookup"-helper
2019-04-11 23:08:57 +02:00
c454d946e3
Merge pull request #1515 from zimmi88/4.x-typings-lint
...
Port over linting and test for typings
2019-03-27 15:11:23 +01:00
9cfb5ddad9
Merge pull request #1516 from phil-davis/revert-double-release-notes
...
Revert duplicate "Update release notes"
2019-03-20 22:53:21 +01:00
be44246221
Remove triplicate of v4.0.12 release notes
2019-03-20 18:19:30 +05:45
002561be94
Revert "Update release notes"
...
This reverts commit 25b2e11dd9
2019-03-20 18:10:47 +05:45
Nils Knappmeier
Matt Hinchliffe
Caleb Mazalevskis
Paul Falgout
Nils Knappmeier
Andrew Leedham
Toby Harris
Phil Davis