Nils Knappmeier 85c8783b34 fix: prevent RCE through the "lookup"-helper ...

- The "lookup" helper could also be used to run a remote code execution
  by manipulating the template. The same check as for regular
  path queries now also is done in the "lookup"-helper

2019-04-13 16:22:01 +02:00

..

artifacts

Bump test coverage

2014-11-08 14:35:23 -06:00

env

chore: bump various dependencies

2018-09-04 00:15:02 +02:00

expected

Rev runtime compiler revision

2015-09-01 01:43:00 -05:00

mustache @ 83b0721610

Add documentation for running tests to contributing.md

2016-11-11 12:01:16 -06:00

.eslintrc

Enable additional es6 features in eslint

2015-04-20 02:24:49 -05:00

amd-runtime.html

Add require.js error reporting in tests

2015-04-07 21:51:50 -05:00

amd.html

Include doctype in amd harness

2015-08-03 23:43:00 -05:00

ast.js

Update grunt-eslint to 20.1.0

2017-10-21 15:42:27 +02:00

basic.js

Update to latest eslint

2015-09-01 17:56:32 -05:00

blocks.js

Implement block decorators

2015-08-22 10:59:34 -07:00

builtins.js

chore: bump various dependencies

2018-09-04 00:15:02 +02:00

compiler.js

Handlebars.compile() does not modify "options" anymore

2017-05-21 13:20:48 +02:00

data.js

Add full support for es6

2015-04-16 16:43:01 -05:00

helpers.js

Update grunt-eslint to 20.1.0

2017-10-21 15:42:27 +02:00

index.html

Fix tests under IE

2015-09-23 21:59:58 -05:00

javascript-compiler.js

Update to latest eslint

2015-09-01 17:56:32 -05:00

parser.js

Update grunt-eslint to 20.1.0

2017-10-21 15:42:27 +02:00

partials.js

Testcase for accessing @root from a partial-block

2018-05-31 23:12:08 +02:00

precompiler.js

Gracefully handle missing uglify-js dependency

2017-10-17 22:18:56 +02:00

regressions.js

Allow partial-blocks to be executed without "options"

2017-05-02 22:48:15 +02:00

require.js

Add full support for es6

2015-04-16 16:43:01 -05:00

runtime.js

Implement decorator helper method

2015-08-22 11:13:08 -07:00

security.js

fix: prevent RCE through the "lookup"-helper

2019-04-13 16:22:01 +02:00

source-map.js

Add full support for es6

2015-04-16 16:43:01 -05:00

spec.js

Update grunt-eslint to 20.1.0

2017-10-21 15:42:27 +02:00

strict.js

Pass undefined fields to helpers in strict mode

2015-08-03 15:59:53 -05:00

string-params.js

Add full support for es6

2015-04-16 16:43:01 -05:00

subexpressions.js

Add full support for es6

2015-04-16 16:43:01 -05:00

tokenizer.js

Update grunt-eslint to 20.1.0

2017-10-21 15:42:27 +02:00

track-ids.js

Fix track id handling in partials

2015-08-03 12:16:02 -05:00

umd-runtime.html

Convert build to expose UMD from the default files

2014-08-25 22:06:15 -05:00

umd.html

Convert build to expose UMD from the default files

2014-08-25 22:06:15 -05:00

utils.js

Escape = in HTML content

2015-09-01 01:44:35 -05:00

visitor.js

Add decorator parsing

2015-08-22 10:59:34 -07:00

whitespace-control.js

Add full support for es6

2015-04-16 16:43:01 -05:00