Yang JunandCursor bf3a06fe23 test(context): assert scope isolation without probing prototypes ...

Replace Object.getPrototypeOf checks for bottom() and getAll() with
'in' checks on typical Object.prototype names plus a merge assertion.

Co-authored-by: Cursor <[email protected]>

2026-05-13 01:06:51 +08:00

..

build

feat: add sha256 and hmac_sha256 filters for cryptographic operations (#889)

2026-05-03 12:03:26 +08:00

cache

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

context

test(context): assert scope isolation without probing prototypes

2026-05-13 01:06:51 +08:00

drop

feat: allow context access in liquidMethodMissing, #808 (#820)

2025-10-06 18:34:08 +08:00

emitters

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

filters

fix(context): use null-prototype scope and register objects

2026-05-12 22:50:51 +08:00

fs

fix: enforce root containment for renderFile/parseFile lookups (#870)

2026-04-07 23:18:53 +08:00

parser

fix: use realpath for fs.contains (#867)

2026-04-06 14:40:35 +08:00

render

fix: enforce renderLimit for empty renderTemplates calls (#894)

2026-05-07 23:03:43 +08:00

tags

revert(context): plain {} registers and getRegister ||

2026-05-13 00:40:49 +08:00

template

feat: static variable analysis (#770)

2024-12-28 21:35:28 +08:00

tokens

fix: empty tagToken.args since 10.20.0, fixes #796

2025-02-09 22:49:40 +08:00

util

fix(date): cap strftime widths and account padding in memoryLimit (#895)

2026-05-10 14:35:28 +08:00

index.ts

fix(context): use null-prototype scope and register objects

2026-05-12 22:50:51 +08:00

liquid-options.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

liquid-options.ts

feat: support Jekyll style where, #768

2024-11-17 21:33:38 +08:00

liquid.ts

fix(security): block Object.prototype filter/tag lookups (RCE)

2026-05-12 00:11:47 +08:00