Yang JunandCursor 047b110939 fix: restore BLOCKED_SCOPE_KEYS gated by ownPropertyOnly ...

Dangerous keys (__proto__, constructor, prototype) are blocked only when
ownPropertyOnly is true (default). With false, full prototype access is
allowed as an explicit opt-out; use bourne for untrusted input.

Co-authored-by: Cursor <[email protected]>

2026-07-23 23:14:15 +08:00

..

demo

feat!: drop TagImplOptions in favor of Tag classes (#839) (#927)

2026-07-09 00:58:43 +08:00

e2e

feat: remove memoryLimit; add templateLimit, outputLengthLimit, maxDepth (#937)

2026-07-15 22:58:13 +08:00

integration

fix: restore BLOCKED_SCOPE_KEYS gated by ownPropertyOnly

2026-07-23 23:14:15 +08:00

stub

feat!: drop TagImplOptions in favor of Tag classes (#839) (#927)

2026-07-09 00:58:43 +08:00

.eslintrc.json

chore: split Github Actions workflows

2023-06-05 23:32:35 +08:00

tsconfig.json

fix: path traversal vulnerability, #851 (#855)

2026-03-08 02:36:09 +08:00