f119497312
chore: attempt to fix saucelabs problems with custom lib
...
- custom "grunt-saucelabs"
- which uses custom "sauce-tunnel"
- which uses current "sauce connect proxy"
2019-08-31 23:58:21 +02:00
62b64ecc3d
chore: add comment to integration test
2019-08-31 23:53:28 +02:00
a57b6824e0
add webpack test
2019-08-31 21:00:14 +02:00
a26633f204
chore: fix integration tests
2019-08-31 19:27:11 +02:00
f9cce4dd02
chore: add framework for various integration tests
2019-08-31 13:18:47 +02:00
16572cd848
feat: enhance typescript definition for knownHelpers
...
- Add support for custom helpers while keeping
the list of builtin-helpers to maintain for
autocompletion support
closes #1544
2019-08-29 22:53:09 +02:00
f98c6a5425
v4.1.2-0
2019-08-25 18:06:35 +02:00
fde409ace6
Update release notes
2019-08-25 18:05:56 +02:00
9aaace76dc
Merge pull request #1540 from ouijan/browser-resolution
...
added browser to package.json, resolves #1102
2019-08-25 17:48:26 +02:00
5eb59a5302
added browser to package.json, resolves #1102
2019-08-22 10:36:13 +10:00
10b5fcf92e
v4.1.2
2019-04-13 16:19:22 +02:00
dd0144c771
Update release notes
2019-04-13 16:18:37 +02:00
594f1e30dd
chore: add missing typescript dependency, add package-lock.json
...
I suspect that the current problems with
saucelabs are due to a change transitive
dependency, but I'm not sure. I'm not
adding the package-lock.json to ensure
that this does not happen in the future.
2019-04-13 16:04:43 +02:00
871acccbb1
test: remove safari from saucelabs
2019-04-13 15:55:52 +02:00
cd38583216
fix: prevent RCE through the "lookup"-helper
...
- The "lookup" helper could also be used to run a remote code execution
by manipulating the template. The same check as for regular
path queries now also is done in the "lookup"-helper
2019-04-11 23:08:57 +02:00
c454d946e3
Merge pull request #1515 from zimmi88/4.x-typings-lint
...
Port over linting and test for typings
2019-03-27 15:11:23 +01:00
9cfb5ddad9
Merge pull request #1516 from phil-davis/revert-double-release-notes
...
Revert duplicate "Update release notes"
2019-03-20 22:53:21 +01:00
be44246221
Remove triplicate of v4.0.12 release notes
2019-03-20 18:19:30 +05:45
002561be94
Revert "Update release notes"
...
This reverts commit 25b2e11dd9
2019-03-20 18:10:47 +05:45
3fb6687013
Port over linting and test for typings
...
- Move typings from lib/ to types/.
- Add dtslint for validating types.
- Use grunt-bg-shell to call out to dtslint during build step.
2019-03-19 16:07:05 -07:00
f691db546e
v4.1.1
2019-03-16 22:28:38 +01:00
25b2e11dd9
Update release notes
2019-03-16 22:28:03 +01:00
e5c39375ac
Update release notes
2019-03-16 22:24:34 +01:00
aef72870b6
Merge pull request #1511 from wycats/saucelabs
...
Fix Saucelabs tests
2019-03-15 23:16:23 +01:00
684f1032c6
chore: reactivate saucelabs-tests
2019-03-15 23:01:49 +01:00
7840ab66a5
test: make security testcase internet explorer compatible
...
Internet Explorer does not support the 'class Testclass {}' notation,
and tests are not compiled using babel.
closes #1497
2019-03-15 23:01:49 +01:00
4108b8330b
Merge pull request #1504 from liqiang372/deprecate-substr-method
...
deprecate substr method and use existing strip function in grammar
2019-03-14 20:23:58 +01:00
445ae12fa4
deprecate substr method and use existing strip function in grammar
2019-03-13 14:24:19 -07:00
5cedd62d7b
fix: add "runtime.d.ts" to allow "require('handlebars/runtime')"
...
see #1499
2019-02-22 00:30:51 +01:00
40fb115e53
Revert "chore: re-activate saucelabs"
...
This reverts commit b2e2cfe56d
2019-02-19 10:49:24 +01:00
b2e2cfe56d
chore: re-activate saucelabs
2019-02-19 10:31:42 +01:00
037bfbf4d9
Merge pull request #1500 from wycats/neo-async
...
Use `neo-async` instead of `async
2019-02-19 09:49:49 +01:00
048f2ce7d2
refactor: replace "async" with "neo-async"
...
The main reason is that neo-async takes a lot less space due to the missing lodash-dependency.
The other is speed.
closes #1431
2019-02-18 19:26:38 +01:00
b92589a3b0
test: add test for NodeJS compatibility
...
The test is a simple addition to the existing tests. It should ensure
that the built Handlebars artifact only uses language features that are
available in old versions of NodeJS. A simple program and the
precompiler are started with NodeJS 0.10 to 11
2019-02-18 19:20:39 +01:00
1c62d4c5d0
Merge branch 'issue-1495' into 4.x
2019-02-07 11:03:35 +01:00
7caca944b1
v4.1.0
2019-02-07 10:46:32 +01:00
7bd34fb466
Update release notes
2019-02-07 10:46:01 +01:00
b02e9a25ee
test: run appveyor tests in Node 10
2019-02-07 10:19:53 +01:00
f1c8b2e2a2
chore: disable sauce-labs
...
Related to #1497
2019-02-07 10:19:53 +01:00
dbc50ac705
chore: bump version of grunt-saucelabs
2019-02-07 10:19:53 +01:00
c6a8fc1c04
chore: add .idea and yarn-error.log to .gitignore
2019-02-07 10:19:53 +01:00
42841c41a4
fix: disallow access to the constructor in templates to prevent RCE
...
This commit fixes a Remote Code Execution (RCE) reported by
npm-security. Access to non-enumerable "constructor"-properties
is now prohibited by the compiled template-code, because this
the first step on the way to creating and execution arbitrary
JavaScript code.
The vulnerability affects systems where an attacker is allowed to
inject templates into the Handlebars setup.
Further details of the attack may be disclosed by npm-security.
Closes #1267
Closes #1495
2019-02-07 10:19:53 +01:00
56fc6768d1
test: run appveyor tests in Node 10
2019-02-07 10:14:44 +01:00
ee3022228b
chore: disable sauce-labs
...
Related to #1497
2019-02-07 10:04:17 +01:00
05e6293bb3
chore: bump version of grunt-saucelabs
2019-02-07 09:53:09 +01:00
2db0d123c8
chore: add .idea and yarn-error.log to .gitignore
2019-02-07 08:49:52 +01:00
edc6220d51
fix: disallow access to the constructor in templates to prevent RCE
...
This commit fixes a Remote Code Execution (RCE) reported by
npm-security. Access to non-enumerable "constructor"-properties
is now prohibited by the compiled template-code, because this
the first step on the way to creating and execution arbitrary
JavaScript code.
The vulnerability affects systems where an attacker is allowed to
inject templates into the Handlebars setup.
Further details of the attack may be disclosed by npm-security.
Closes #1267
Closes #1495
2019-02-07 08:49:41 +01:00
bacd473fe6
chore: fix components/handlebars package.json and auto-update on release
2019-01-02 01:07:05 +01:00
27ac1ee396
Feat: Import TypeScript typings
...
- Import typings from DefinitelyTyped into repo.
- Update typings header to cite contributors from history and git blame.
- Update package.json to add typings field.
2018-12-21 23:27:58 +01:00
78dd89c13a
chore: Use node 10 to build handlebars
...
Node 10 is LTS now...
2018-12-15 23:40:08 +01:00
Nils Knappmeier
Nils Knappmeier
Toby Harris
Phil Davis
Timothy Lindvall
Qiang Li