Yang JunandCursor 85321c6d64 fix: apply ownPropertyOnly uniformly in readJSProperty ...

Proto keys block inherited access only; ownPropertyOnly is checked once before return for all keys. Own __proto__/constructor/prototype properties are readable—sanitize untrusted scope input.

Co-authored-by: Cursor <[email protected]>

2026-07-23 22:59:37 +08:00

..

access-scope-in-filters.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

caching.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

contribution-guidelines.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

differences.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

drops.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

escaping.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

intro-to-liquid.md

docs(readme): README overhaul, used-by grid, and docs homepage (#914)

2026-06-23 17:39:19 +08:00

migrate-to-9.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

operators.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

options.md

fix: apply ownPropertyOnly uniformly in readJSProperty

2026-07-23 22:59:37 +08:00

parse-parameters.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

partials-and-layouts.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

plugins.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

register-filters-tags.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

render-file.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

render-tag-content.md

feat: remove memoryLimit; add templateLimit, outputLengthLimit, maxDepth (#937)

2026-07-15 22:58:13 +08:00

security-model.md

fix: apply ownPropertyOnly uniformly in readJSProperty

2026-07-23 22:59:37 +08:00

setup.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

static-analysis.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

sync-and-async.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

truthy-and-falsy.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

use-in-expressjs.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00

whitespace-control.md

docs: revisit wording & style for liquidjs.com (#906)

2026-06-08 00:26:52 +08:00