Yang JunandCursor 072f63c2c0 fix: tie proto key blocking to ownPropertyOnly policy ...

Block __proto__, constructor, and prototype only when ownPropertyOnly
is true or when access would traverse the prototype chain. Allow own
properties with those names when ownPropertyOnly is false.

Co-authored-by: Cursor <[email protected]>

2026-07-19 13:54:43 +08:00

..

access-scope-in-filters.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

caching.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

contribution-guidelines.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

differences.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

drops.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

escaping.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

intro-to-liquid.md

docs(readme): README overhaul, used-by grid, and docs homepage (#914)

2026-06-23 17:39:19 +08:00

migrate-to-9.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

operators.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

options.md

feat: harden scope writes, iteration, and readSize (#898)

2026-07-18 19:58:14 +08:00

parse-parameters.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

partials-and-layouts.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

plugins.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

register-filters-tags.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

render-file.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

render-tag-content.md

feat: remove memoryLimit; add templateLimit, outputLengthLimit, maxDepth (#937)

2026-07-15 22:58:13 +08:00

security-model.md

fix: tie proto key blocking to ownPropertyOnly policy

2026-07-19 13:54:43 +08:00

setup.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

static-analysis.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

sync-and-async.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

truthy-and-falsy.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

use-in-expressjs.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

whitespace-control.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00