Yang JunandGitHub e743da0020 fix: sort and sort_natural filters bypass ownPropertyOnly (#869) ...

Use _getFromScope for property access in sort/sort_natural filters to respect the ownPropertyOnly security option, preventing prototype chain traversal that could leak sensitive inherited properties.

Also extract shared sortBy helper, add orderedCompare with nil handling consistent with caseInsensitiveCompare and Ruby Liquid.

Made-with: Cursor

2026-04-07 21:01:20 +08:00

..

demo

test: refactor test:demo script into demo/*/test.sh

2024-08-29 01:30:25 +08:00

e2e

fix: use realpath for fs.contains (#867)

2026-04-06 14:40:35 +08:00

integration

fix: sort and sort_natural filters bypass ownPropertyOnly (#869)

2026-04-07 21:01:20 +08:00

stub

fix: use realpath for fs.contains (#867)

2026-04-06 14:40:35 +08:00

.eslintrc.json

chore: split Github Actions workflows

2023-06-05 23:32:35 +08:00

tsconfig.json

fix: path traversal vulnerability, #851 (#855)

2026-03-08 02:36:09 +08:00