Yang JunandCursor 85321c6d64 fix: apply ownPropertyOnly uniformly in readJSProperty ...

Proto keys block inherited access only; ownPropertyOnly is checked once before return for all keys. Own __proto__/constructor/prototype properties are readable—sanitize untrusted scope input.

Co-authored-by: Cursor <[email protected]>

2026-07-23 22:59:37 +08:00

..

cache.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

delimiter.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

dos.spec.ts

feat: remove memoryLimit; add templateLimit, outputLengthLimit, maxDepth (#937)

2026-07-15 22:58:13 +08:00

fs-option.spec.ts

feat: locale support for date filter, #567 (#723)

2024-07-22 00:39:44 +08:00

liquid.spec.ts

feat!: drop TagImplOptions in favor of Tag classes (#839) (#927)

2026-07-09 00:58:43 +08:00

operators-option.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

output-escape.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

register-filters.spec.ts

fix(security): block Object.prototype filter/tag lookups (RCE) (#897)

2026-05-14 22:18:10 +08:00

register-tags.spec.ts

feat!: drop TagImplOptions in favor of Tag classes (#839) (#927)

2026-07-09 00:58:43 +08:00

root.spec.ts

test: case for "." path handling

2024-11-12 23:59:40 +08:00

scope-security.spec.ts

fix: apply ownPropertyOnly uniformly in readJSProperty

2026-07-23 22:59:37 +08:00

strict.spec.ts

fix: Allow lenientIf for multiple operands (issue #682) (#683)

2024-04-21 16:04:38 +08:00

trimming.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

whitespace-ctrl.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00