Tobi Lutke 6c0d599c89 Yield to caller for external tags and filters ...

Instead of trying to handle external tags/filters inside the sandbox,
yield back to the caller with [:tag, ...] or [:filter, ...] args.

This cleanly separates concerns:
- Sandbox handles compiled template logic
- Caller handles external calls with full Ruby access

API:
  compiled.render(assigns) do |call_type, *args|
    case call_type
    when :tag
      tag_var, tag_assigns = args
      # Handle with full Liquid context
    when :filter
      filter_name, input, filter_args = args
      # Handle with custom filter handler
    end
  end

If no block is given, a default handler is used that:
- Renders external tags using Liquid::Context
- Calls filter methods via filter_handler

Also:
- Keep public_send in sandbox (safe, only calls public methods)
- Load date/time libs into sandbox for date filter support
- Preserve Date, DateTime, Time constants after lock

2025-12-31 12:32:41 -04:00

..

liquid

Yield to caller for external tags and filters

2025-12-31 12:32:41 -04:00

liquid.rb

Add Liquid::Box for secure sandboxed template execution

2025-12-31 12:19:53 -04:00