harttle / liquidjs / 25281962657

100%

push

github

fix: propagate ownPropertyOnly into Context.spawn() for {% render %} (#893)

Child contexts from spawn() re-derived ownPropertyOnly from Liquid opts
only, dropping per-render RenderOptions overrides. That broke the contract
that parseAndRender(..., { ownPropertyOnly: true }) locks down a single
render, including partials loaded via {% render %}.

Add regression test matching prototype-chain leak PoC.

Co-authored-by: Cursor <cursoragent@cursor.com>

1124 of 1135 branches covered (99.03%)

Branch coverage included in aggregate %.

2983 of 2990 relevant lines covered (99.77%)

19919.66 hits per line