Skip to content

Instantly share code, notes, and snippets.

@ErisDS
Created April 11, 2016 14:18
Show Gist options
  • Save ErisDS/cad69e5ca7896c19500cdb7dd959462d to your computer and use it in GitHub Desktop.
Save ErisDS/cad69e5ca7896c19500cdb7dd959462d to your computer and use it in GitHub Desktop.
Attempting handlebars 3.0.4 release
{"note":"- Further relax uglify dependency - 4cd5305\n- Update uglify-js to avoid vulnerability - d97c2e6\n- Escape = in HTML content - 1c863e3\n\nCompatibility notes:\n- The = character is now HTML escaped. This closes a potential exploit case when using unquoted attributes, i.e. <div foo={{bar}}>. In general it's recommended that attributes always be quoted when their values are generated from a mustache to avoid any potential exploit surfaces.\n","increment":"patch","version":"v3.0.4"}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment