Yang JunandCursor 09b12b7510 fix(security): block Object.prototype filter/tag lookups (RCE) ...

`liquid.filters` and `liquid.tags` were plain `{}` so bracket access on
template-controlled keys inherited from `Object.prototype`. Most damaging:
`{{ x | valueOf }}` resolved to `Object.prototype.valueOf`, which the
filter pipeline called as a handler with `this = FilterImpl`; valueOf
returns its receiver, leaking `context`, `liquid`, `token` (and via them
parser, loader, fs) into the template — chain that with `group_by`/`where`
gadgets and an attacker reaches `Function`/`child_process` for RCE.
Same shape on the tag side: `{% constructor %}` bypassed the
"tag not found" assertion and crashed with a confusing message.

Use null-prototype storage so `liquid.filters[name]` / `liquid.tags[name]`
only resolve to explicitly registered entries. The existing
`assert(impl || !strictFilters)` and `assert(TagClass, ...)` now do the
right thing for `valueOf`, `toString`, `constructor`, `__proto__`,
`hasOwnProperty`, `isPrototypeOf`, `__defineGetter__`, etc.

Co-authored-by: Cursor <[email protected]>

2026-05-12 00:11:47 +08:00

..

demo

test: refactor test:demo script into demo/*/test.sh

2024-08-29 01:30:25 +08:00

e2e

fix: nested block for layout (#883)

2026-04-19 23:41:35 +08:00

integration

fix(security): block Object.prototype filter/tag lookups (RCE)

2026-05-12 00:11:47 +08:00

stub

fix: use realpath for fs.contains (#867)

2026-04-06 14:40:35 +08:00

.eslintrc.json

chore: split Github Actions workflows

2023-06-05 23:32:35 +08:00

tsconfig.json

fix: path traversal vulnerability, #851 (#855)

2026-03-08 02:36:09 +08:00