Nils Knappmeier cd38583216 fix: prevent RCE through the "lookup"-helper ...

- The "lookup" helper could also be used to run a remote code execution
  by manipulating the template. The same check as for regular
  path queries now also is done in the "lookup"-helper

2019-04-11 23:08:57 +02:00

..

compiler

deprecate substr method and use existing strip function in grammar

2019-03-13 14:24:19 -07:00

decorators

Implement inline partials

2015-08-22 11:13:08 -07:00

helpers

fix: prevent RCE through the "lookup"-helper

2019-04-11 23:08:57 +02:00

base.js

v4.1.1

2019-03-16 22:28:38 +01:00

decorators.js

Implement inline partials

2015-08-22 11:13:08 -07:00

exception.js

Make "column"-property of Errors enumerable

2016-12-30 16:33:32 +01:00

helpers.js

Move helpers into separate modules

2015-08-01 17:54:47 -05:00

logger.js

Update grunt-eslint to 20.1.0

2017-10-21 15:42:27 +02:00

no-conflict.js

Return current handlebars instance from noConflict

2015-11-19 22:58:26 -06:00

runtime.js

Allow partial-blocks to be executed without "options"

2017-05-02 22:48:15 +02:00

safe-string.js

Add full support for es6

2015-04-16 16:43:01 -05:00

utils.js

Fix lint errors under latest eslint

2015-10-31 13:32:43 -05:00