Files
liquidjs/test/integration
Harttle e378c792f5 fix: sort and sort_natural filters bypass ownPropertyOnly
Use _getFromScope for property access in sort/sort_natural filters to respect the ownPropertyOnly security option, preventing prototype chain traversal that could leak sensitive inherited properties.

Also extract shared sortBy helper, add orderedCompare with nil handling consistent with caseInsensitiveCompare and Ruby Liquid.

Made-with: Cursor
2026-04-07 20:44:15 +08:00
..