pillarjs / hbs / 38707833137

85%

master: 94%

push

github

fix(lib): Addresses GHSA-rg36-rxv9-2m9q vulnerability (#274)

* fix: escape async helper values at the render substitution sites

Ref: https://github.com/pillarjs/hbs/security/advisories/GHSA-rg36-rxv9-2m9q

-------

Co-authored-by: EQSTLab <148991397+EQSTLab@users.noreply.github.com>
Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>
Co-authored-by: Ulises Gascón <ulisesgascongonzalez@gmail.com>
(cherry picked from commit 1f67ecf53)

* test(lib): cover async helper output escaping

---------

Co-authored-by: Ulises Gascón <ulisesgascongonzalez@gmail.com>
Co-authored-by: EQSTLab <148991397+EQSTLab@users.noreply.github.com>
Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>

57 of 79 branches covered (72.15%)

Branch coverage included in aggregate %.

3 of 3 new or added lines in 1 file covered. (100.0%)

180 of 199 relevant lines covered (90.45%)

181.93 hits per line