liquidjs

Labyricorn/liquidjs

Fork 0

mirror of https://github.com/harttle/liquidjs.git synced 2026-09-18 05:50:43 -07:00

Commit Graph

Author SHA1 Message Date

Harttle 1de6adf308 test: cases for parse(<tpl>, <relative filepath>), #395 2021-10-10 20:37:26 +08:00

Harttle 822ba0be0f fix: skip root check for renderFile() 2021-10-06 18:38:58 +08:00

Author	SHA1	Message	Date
Harttle	1de6adf308	test: cases for parse(<tpl>, <relative filepath>), #395	2021-10-10 20:37:26 +08:00
Harttle	822ba0be0f	fix: skip root check for renderFile()	2021-10-06 18:38:58 +08:00
Harttle	a3455ebd0b	feat: `relativeReference` for render/include/layout, #395 - `relativeReference` is enabled by default, set to `false` to disable - Referenced files are still constrained within root/partias/layouts - fix: relative filenames are not constrained (which allows arbitrary filesystem read) Example Usage: {% render "../foo/bar.html" %} Note: ../foo/bar.html' should also be within `partials` (or `root` if `partials` not set)	2021-10-06 17:36:37 +08:00

Harttle

a3455ebd0b

feat: relativeReference for render/include/layout, #395

- `relativeReference` is enabled by default, set to `false` to disable
- Referenced files are still constrained within root/partias/layouts
- fix: relative filenames are not constrained (which allows arbitrary filesystem read)

Example Usage:

{% render "../foo/bar.html" %}

Note:

../foo/bar.html' should also be within `partials` (or `root` if `partials` not set)

2021-10-06 17:36:37 +08:00