Yang JunandCursor cd94bba730 fix(security): respect ownPropertyOnly for size/first/last magic keys ...

readSize, readFirst, and readLast bypassed the ownPropertyOnly guard by
reading inherited properties from the prototype chain. Pass the flag through
and only allow prototype size lookups when ownPropertyOnly is false.

Co-authored-by: Cursor <[email protected]>

2026-06-20 00:29:19 +08:00

..

.eslintrc.json

feature: get nyc, babel and coveralls working

2018-08-26 21:54:35 +08:00

browser.spec.ts

feat: more flexible squared property read expression, fixes #643 (#646)

2023-08-23 00:45:49 +08:00

drop.spec.ts

feat: allow context access in liquidMethodMissing, #808 (#820)

2025-10-06 18:34:08 +08:00

eval-value-sync.spec.ts

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00

eval-value.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

express.spec.ts

test: case for "." path handling

2024-11-12 23:59:40 +08:00

issues.spec.ts

fix(security): respect ownPropertyOnly for size/first/last magic keys

2026-06-20 00:29:19 +08:00

parse-and-analyze.spec.ts

feat: static variable analysis (#770)

2024-12-28 21:35:28 +08:00

parse-and-render.spec.ts

fix: nested block for layout (#883)

2026-04-19 23:41:35 +08:00

render-file.spec.ts

fix: enforce root containment for renderFile/parseFile lookups (#870)

2026-04-07 23:18:53 +08:00

render-to-node-stream.spec.ts

fix: enforce root containment for renderFile/parseFile lookups (#870)

2026-04-07 23:18:53 +08:00

xhr.spec.ts

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00