Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also .

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also .
base repository: handlebars-lang/handlebars.js
base: v4.6.0
Choose a base ref
head repository: handlebars-lang/handlebars.js
compare: v4.7.0
Choose a head ref
  • 4 commits
  • 12 files changed
  • 1 contributor

Commits on Jan 10, 2020

  1. feat: default options for controlling proto access

    This commmit adds the runtime options
    - `allowProtoPropertiesByDefault` (boolean, default: false) and
    - `allowProtoMethodsByDefault` (boolean, default: false)`
    which can be used to allow access to prototype properties and
    functions in general.
    
    Specific properties and methods can still be disabled from access
    via `allowedProtoProperties` and `allowedProtoMethods` by
    setting the corresponding values to false.
    
    The methods `constructor`, `__defineGetter__`, `__defineSetter__`, `__lookupGetter__`
    and the property `__proto__` will be disabled, even if the allow...ByDefault-options
    are set to true. In order to allow access to those properties and methods, they have
    to be explicitly set to true in the 'allowedProto...'-options.
    
    A warning is logged when the a proto-access it attempted and denied
    by default (i.e. if no option is set by the user to make the access
    decision explicit)
    nknapp committed Jan 10, 2020
    Copy the full SHA
    7af1c12 View commit details
    Browse the repository at this point in the history
  2. fix: use "logger" instead of console.error

    ... to be graceful with older browser without "console"
    nknapp committed Jan 10, 2020
    Copy the full SHA
    575d877 View commit details
    Browse the repository at this point in the history
  3. Update release notes

    nknapp committed Jan 10, 2020
    Copy the full SHA
    1f0834b View commit details
    Browse the repository at this point in the history
  4. v4.7.0

    nknapp committed Jan 10, 2020
    Copy the full SHA
    0d5c807 View commit details
    Browse the repository at this point in the history