32831631690
92%

Ran 25 Aug 2026 09:23AM UTC

Jobs 0

Files 0

Run time –

Badge

Embed ▾

pending completion

Build # 32831631690

Build Type

push

github

Committed by

web-flow

Commit Message

Merge commit from fork

* tests: assert async helper output is HTML-escaped by {{...}}

Ref: https://github.com/pillarjs/hbs/security/advisories/GHSA-rg36-rxv9-2m9q

* fix: escape async helper values at the render substitution sites

Wrap async-helper placeholder substitution with handlebars.Utils.escapeExpression at the three render paths (cached, uncached, layout) so `{{...}}` honors its documented HTML-escape contract for async helpers, matching sync-helper behavior. Consumers who need raw HTML output can opt in via `new handlebars.SafeString(value)` in the callback.

Ref: https://github.com/pillarjs/hbs/security/advisories/GHSA-rg36-rxv9-2m9q

Co-Authored-By: EQSTLab <148991397+EQSTLab@users.noreply.github.com>

* fix: enhance render function to accept options and improve async helper caching

* fix: preserve legacy output for nullish async helper values

---------

Co-authored-by: EQSTLab <148991397+EQSTLab@users.noreply.github.com>
Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>

Coverage Stats

Source Files on build 32831631690

Detailed source file information is not available for this build.

pillarjs / hbs / 32831631690
92%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on build 32831631690

pillarjs / hbs / 32831631690 92%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on build 32831631690

pillarjs / hbs / 32831631690
92%

README BADGES
x