Yang Jun and Cursor
503429e4cd
docs: reorganize security-model structure for clarity
...
Restructure English and Chinese security-model docs into a consistent flow: security boundary, limits overview, per-limit details, and online service guidance.
Co-authored-by: Cursor <[email protected] >
2026-05-09 22:28:00 +08:00
Yang Jun and Cursor
1e8ce453a5
docs: merge DoS details into security-model docs
...
Move the detailed parseLimit/renderLimit/memoryLimit explanations and examples into the English and Chinese security-model pages so content from the removed dos pages is preserved.
Co-authored-by: Cursor <[email protected] >
2026-05-09 22:06:06 +08:00
Yang Jun and Cursor
cd431aabd9
docs: consolidate DoS docs into security-model pages
...
Merge DoS guidance into security-model docs in both English and Chinese, and remove the placeholder dos.md pages to avoid duplicate/redirect-only docs.
Co-authored-by: Cursor <[email protected] >
2026-05-09 14:50:52 +08:00
Yang Jun and Cursor
56b14d8a2d
fix(date): harden strftime memory accounting and document security model
...
Move strftime memory charging into the same formatting path used for padding, enforce pre-allocation checks, and add regression tests for non-string date format PoCs. Add dedicated docs clarifying that memoryLimit is cooperative DoS mitigation and not strict heap isolation.
Co-authored-by: Cursor <[email protected] >
2026-05-09 01:37:27 +08:00
Yang Jun and GitHub
529dd67eeb
fix: use realpath for fs.contains ( #867 )
...
* fix: use realpath for fs.contains
* chore: reset file mode changes
Made-with: Cursor
* fix: Windows compat for contains/containsSync and toLiquidAsync arg order
Made-with: Cursor
2026-04-06 14:40:35 +08:00
Yang Jun and GitHub
f1fc573a65
docs: state differences regarding inspect array/hash, #852 , #853 ( #858 )
2026-03-08 03:14:13 +08:00
3cd024d652
fix: path traversal vulnerability, #851 ( #855 )
...
* Fix Path Traversal fallback
* Update loader.ts
Fixed nested
* Update loader.ts
padding fix
* refactor: reuse root enforcing
* docs: update test case and docs
---------
Co-authored-by: MorielHarush <[email protected] >
2026-03-08 02:36:09 +08:00
Yang Jun and GitHub
1c6316111d
docs: update docs for operators ( #847 )
2026-01-10 22:09:10 +08:00
immerrr again and GitHub
3a02eb12bf
docs: update tutorial on operators and precedence ( #830 )
2025-10-31 09:34:05 +08:00
Vlad GURDIGA and GitHub
40c52124d7
docs: Fix typo in options.md ( #802 )
...
Looks like just a typo.
2025-05-09 21:16:08 +08:00
Vlad GURDIGA and GitHub
3b9202465e
docs: A lil Markdown fix ( #803 )
...
Replaced square brackets with round ones in a link markup.
2025-05-09 20:36:49 +08:00
Harttle
fc42ad7548
docs: update financial contributors
2025-04-03 21:27:48 +08:00
Ed Hanton and Yang Jun
0fdc5c79da
Update register-filters-tags.md
...
Improve documentation
2025-04-02 21:01:20 +08:00
Harttle
94a6715667
docs: zh-cn translation for static analyze features
2024-12-28 21:49:29 +08:00
James and GitHub
3492ff63f4
feat: static variable analysis ( #770 )
...
* feat: static variable analysis
* Accept any iterable from `children`, `arguments`, etc.
* Test analysis of standard tags
* Use `TagToken.tokenizer` instead of creating a new one
* Test analysis of netsted tags
* Group variables by their root value
* Test analysis of nested globals and locals
* Analyze included and rendered templates WIP
* Use existing tokenizer when constructing `Hash`
* Improve test coverage
* Analyze variables from `layout` and `block` tags
* Test analysis of Jekyll style includes
* Handle variables that start with a nested variable
* Async analysis
* Test non-standard tag end to end
* Implement convenience analysis methods on the `Liquid` class
* More analysis convenience methods
* Accept string or template array
* Draft static analysis docs
* Deduplicate variables names
* Fix isolated scope global variable map
* Coerce variables to strings instead of extending String
* Private map instead of extending Map
* Fix e2e test
* Tentatively implement analysis of aliased variables
* Fix nested variable segments array
* Update docs sidebar
2024-12-28 21:35:28 +08:00
Matthieu Bacconnier and GitHub
4490e4b789
Replace trimValue with trimOutput ( #757 )
...
I believe this is a type, as the config has been called trimOutputLeft/Right for 5 years: https://github.com/harttle/liquidjs/blame/83922032b79fd678237de8786f0d75fb33e6312f/src/liquid-options.ts#L54
I'm new to this library, so I could also be missing out on something, in which case feel free to close, but the trimValue options do not exist on Config.
2024-09-28 00:49:37 +08:00
Yang Jun
5b1658c823
docs: fix styles and escape
2024-08-20 03:35:37 +08:00
Jun Yang and GitHub
e941378535
docs: add internal types in apidoc ( #734 )
...
* docs: add internal types in apidoc
* chore: downgrade package-lock version for NodeJS 14
* test: test case when performance uses Date.now
2024-08-17 00:55:24 +08:00
Yang Jun
e443068cb9
feat: DoS prevention, #250
2024-07-09 22:51:11 +08:00
Harttle
df27ac6947
feat: support in-memory template mapping, inspired by @jg-rp #714
2024-07-08 02:25:25 +08:00
Harttle
22b5a12333
fix: report error for malformed else/elsif/endif/endfor, #713
2024-07-05 01:23:33 +08:00
a0ea372764
docs: fix some spelling ( #708 )
...
* spelling: according
Signed-off-by: Josh Soref <[email protected] >
* spelling: asynchronously
Signed-off-by: Josh Soref <[email protected] >
* spelling: background
Signed-off-by: Josh Soref <[email protected] >
* spelling: camel
Signed-off-by: Josh Soref <[email protected] >
* spelling: cannot
Signed-off-by: Josh Soref <[email protected] >
* spelling: case-sensitive
Signed-off-by: Josh Soref <[email protected] >
* spelling: comparison
Signed-off-by: Josh Soref <[email protected] >
* spelling: demos
Signed-off-by: Josh Soref <[email protected] >
* spelling: forloop
Signed-off-by: Josh Soref <[email protected] >
* spelling: formatters
Signed-off-by: Josh Soref <[email protected] >
* spelling: github
Signed-off-by: Josh Soref <[email protected] >
* spelling: guidelines
Signed-off-by: Josh Soref <[email protected] >
* spelling: hashes
Signed-off-by: Josh Soref <[email protected] >
* spelling: https
Signed-off-by: Josh Soref <[email protected] >
* spelling: javascript
Signed-off-by: Josh Soref <[email protected] >
* spelling: keep
Signed-off-by: Josh Soref <[email protected] >
* spelling: natural
Signed-off-by: Josh Soref <[email protected] >
* spelling: neither
Signed-off-by: Josh Soref <[email protected] >
* spelling: no longer
Signed-off-by: Josh Soref <[email protected] >
* spelling: nonexistent
Signed-off-by: Josh Soref <[email protected] >
* spelling: output
Signed-off-by: Josh Soref <[email protected] >
* spelling: polymorphism
Signed-off-by: Josh Soref <[email protected] >
* spelling: precache
Signed-off-by: Josh Soref <[email protected] >
* spelling: programmatically
Signed-off-by: Josh Soref <[email protected] >
* spelling: punctuation
Signed-off-by: Josh Soref <[email protected] >
* spelling: registration
Signed-off-by: Josh Soref <[email protected] >
* spelling: rendered
Signed-off-by: Josh Soref <[email protected] >
* spelling: synchronously
Signed-off-by: Josh Soref <[email protected] >
* spelling: thrown
Signed-off-by: Josh Soref <[email protected] >
* spelling: trimmed
Signed-off-by: Josh Soref <[email protected] >
* spelling: unbalanced
Signed-off-by: Josh Soref <[email protected] >
* chore: use example.com
* chore: fix reference for sidebar.registration
---------
Signed-off-by: Josh Soref <[email protected] >
Co-authored-by: Harttle <[email protected] >
2024-06-17 17:19:46 +08:00
Cosmin Popovici and Jun Yang
3b24f079ea
docs: update broken link
...
updated broken link to shopify/liquid differences page
2024-05-14 18:20:54 +08:00
Yang Jun
842b45c96a
feat: jsonify, inspect, to_integer, normalize_whitespace filters
2024-05-06 21:10:27 +08:00
Yang Jun and Jun Yang
e09657c52b
fix: allow %Z for TimezoneDate, update docs accordingly #684
2024-04-21 15:57:43 +08:00
Jun Yang
2b713b721d
feat: group_by/group_by_exp/find/find_exp from Jekyll, #443
2024-04-14 19:34:07 +08:00
Harttle
01029aba87
docs: try to include all sponsors/backers
2024-03-11 22:06:17 +08:00
Harttle
fe978c8cd9
docs: Liquid Drops
2023-11-29 21:53:09 +08:00
Rasmus Wriedt Larsen and Jun Yang
6ebf2ee427
docs: fix typo (ans => and)
2023-10-31 19:55:19 +08:00
David LJ and Jun Yang
7009a054f3
docs: fix options link in setup tutorial
2023-08-19 23:53:14 +08:00
Nick Reilingh and GitHub
5facd99a27
chore: grammar/typo fixes for differences.md ( #634 )
2023-08-08 21:58:39 +08:00
Harttle
3f4f328572
docs: update LiquidJS contributors and users
2023-07-16 14:22:54 +08:00
Harttle
e9da7f39de
docs: add contributing.md into docs/.../contribution-guidelines.md
2023-06-04 02:15:36 +08:00
BaNgan and Jun Yang
e50267feaa
Update differences.md
...
- Shopify also has `json` filter, I think it is equivalent to liquidJS `json`
2023-03-20 22:58:46 +08:00
Harttle and Jun Yang
da93102c1c
chore: upgrade API doc to latest typedoc, fixes #593
2023-03-20 00:41:06 +08:00
bobgubko and GitHub
4542ddcfc3
fix: sample FS in render-file.md ( #594 )
2023-03-19 23:42:41 +08:00
Jun Yang
2def145cf6
docs: update docs for ownPropertyOnly, #588
2023-03-04 00:21:41 +08:00
prassie and GitHub
3fb66465c6
feat: LiquidOptions.dateFormat to override default date format ( #587 )
...
doc: updates related to LiquidOptions.dateFormat
doc: revamped the date filter doc for easier reference
2023-02-22 23:56:33 +08:00
Harttle
8ef920928c
docs: add slavivanov and DaRosenberg into contributor list
2023-02-14 22:57:25 +08:00
24c8a1e372
feat: Adds support for options to CLI and improves usability ( #586 )
...
* Improved UX of CLI
* Updated docs and setup tutorial
* Corrected version number in TODO comments
* Downgraded lock file version
* Restored previous lock file
* Removed --keep-output-type option
* Switch to using async IO to avoid problems stdin in some scenarios
https://stackoverflow.com/questions/40362369/stdin-read-fails-on-some-input
https://stackoverflow.com/questions/40362369/stdin-read-fails-on-some-input
* Addressed feedback from code review
* Changed to curl-like systax for specifing inputs as literals, paths or stdin
---------
Co-authored-by: Daniel Rosenberg <[email protected] >
2023-02-14 22:03:00 +08:00
prassie and GitHub
a55f44f095
Added documentation for date ordinals support in date filter via %q ( #581 )
...
* Added date ordinals support in date filter via %q
* fix: validation regex for default date format
* fix: validation regex for default date format
2023-02-04 11:31:30 +08:00
Harttle and Harttle
d24655887f
docs: update docs and demo for Value usage, fixes #568
2022-12-14 02:14:03 +08:00
Jun Yang
92992689cd
refactor: Tag class support in registerTag()
2022-11-27 14:04:01 +08:00
Yahang Wu and GitHub
c467630e0b
docs: fix a broken link for abstract file interface ( #498 )
2022-04-19 23:48:25 +08:00
Harttle
aa955173d4
fix: corner case for concat filter without argument, #481
2022-03-02 21:21:25 +08:00
Damian Nowak and GitHub
58d03890b4
docs: whitespace-control: correct typo ( #462 )
2022-01-29 11:50:37 +08:00
Harttle and Harttle
7e99efc513
feat: ownPropertyOnly option to protect prototype, #454
2022-01-29 01:22:34 +08:00
Harttle and Harttle
527858fc14
docs: better PWA, more responsive, better description
2022-01-29 00:37:43 +08:00
Harttle
8db6c7b28d
docs: tutorial for render tag content
2022-01-23 14:24:58 +08:00
Harttle and Harttle
117eaf57c3
docs: add additional filters/tags as differences, closes #331
2022-01-22 23:24:06 +08:00