• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

harttle / liquidjs
100%

Build:
DEFAULT BRANCH: master
Repo Added 19 Feb 2019 03:45PM UTC
Files 119
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH master
branch: SELECT
CHANGE BRANCH
x
  • No branch selected
  • 833_Support-Value-Expressions-as-Operands-in-Conditional-and-Loop-Tags
  • 868_null_date
  • 871_rounding_negative_half
  • MorielHarush-master
  • all-contributors/add-CriGoT
  • all-contributors/add-JasonEtco
  • all-contributors/add-Pixcell
  • all-contributors/add-TrySound
  • all-contributors/add-ameyaapte1
  • all-contributors/add-bangank36
  • all-contributors/add-bobgubko
  • all-contributors/add-hongl-1
  • all-contributors/add-jamelait
  • all-contributors/add-mahyar-pasarzangene
  • all-contributors/add-mastodon0
  • all-contributors/add-prassie
  • all-contributors/add-santialbo
  • all-contributors/add-zxx-457
  • chore-chai2jest
  • chore-github-actions
  • chore-pr-title-checker
  • createTrie-perf
  • cursor/fix-template-mapfs-containment-1b13
  • dbg
  • dependabot/npm_and_yarn/acorn-6.4.1
  • dependabot/npm_and_yarn/ansi-regex-3.0.1
  • dependabot/npm_and_yarn/async-3.2.3
  • dependabot/npm_and_yarn/decode-uri-component-0.2.2
  • dependabot/npm_and_yarn/docs/ajv-6.12.6
  • dependabot/npm_and_yarn/docs/ansi-regex-4.1.1
  • dependabot/npm_and_yarn/docs/decode-uri-component-0.2.2
  • dependabot/npm_and_yarn/docs/glob-parent-5.1.2
  • dependabot/npm_and_yarn/docs/highlight.js-9.18.5
  • dependabot/npm_and_yarn/docs/lodash-4.17.19
  • dependabot/npm_and_yarn/docs/lodash-4.17.21
  • dependabot/npm_and_yarn/docs/minimatch-3.1.2
  • dependabot/npm_and_yarn/docs/minimist-and-hexo-renderer-swig-1.2.7
  • dependabot/npm_and_yarn/docs/moment-2.29.2
  • dependabot/npm_and_yarn/docs/moment-2.29.4
  • dependabot/npm_and_yarn/docs/moment-timezone-0.5.37
  • dependabot/npm_and_yarn/docs/path-parse-1.0.7
  • dependabot/npm_and_yarn/docs/prismjs-1.21.0
  • dependabot/npm_and_yarn/docs/prismjs-1.23.0
  • dependabot/npm_and_yarn/docs/prismjs-1.24.0
  • dependabot/npm_and_yarn/docs/prismjs-1.25.0
  • dependabot/npm_and_yarn/docs/prismjs-1.27.0
  • dependabot/npm_and_yarn/docs/pug-code-gen-2.0.3
  • dependabot/npm_and_yarn/docs/terser-4.8.1
  • dependabot/npm_and_yarn/docs/y18n-4.0.1
  • dependabot/npm_and_yarn/elliptic-6.5.3
  • dependabot/npm_and_yarn/elliptic-6.5.4
  • dependabot/npm_and_yarn/eslint-utils-1.4.3
  • dependabot/npm_and_yarn/got-and-semantic-release/npm--removed
  • dependabot/npm_and_yarn/handlebars-4.5.3
  • dependabot/npm_and_yarn/handlebars-4.7.7
  • dependabot/npm_and_yarn/highlight.js-9.18.5
  • dependabot/npm_and_yarn/hosted-git-info-2.8.9
  • dependabot/npm_and_yarn/https-proxy-agent-2.2.4
  • dependabot/npm_and_yarn/ini-1.3.7
  • dependabot/npm_and_yarn/ini-1.3.8
  • dependabot/npm_and_yarn/jquery-3.5.0
  • dependabot/npm_and_yarn/jsdom-16.5.0
  • dependabot/npm_and_yarn/minimatch-3.1.2
  • dependabot/npm_and_yarn/minimist-1.2.6
  • dependabot/npm_and_yarn/nanoid-3.3.1
  • dependabot/npm_and_yarn/node-fetch-2.6.1
  • dependabot/npm_and_yarn/node-fetch-2.6.7
  • dependabot/npm_and_yarn/npm-6.13.4
  • dependabot/npm_and_yarn/npm-6.14.6
  • dependabot/npm_and_yarn/npm-user-validate-1.0.1
  • dependabot/npm_and_yarn/path-parse-1.0.7
  • dependabot/npm_and_yarn/path-parse-and-path-parse-1.0.7
  • dependabot/npm_and_yarn/pathval-1.1.1
  • dependabot/npm_and_yarn/semantic-release-17.2.3
  • dependabot/npm_and_yarn/semantic-release-19.0.3
  • dependabot/npm_and_yarn/semver-regex-3.1.4
  • dependabot/npm_and_yarn/shelljs-0.8.5
  • dependabot/npm_and_yarn/ssri-6.0.2
  • dependabot/npm_and_yarn/tar-4.4.19
  • dependabot/npm_and_yarn/trim-off-newlines-1.0.3
  • dependabot/npm_and_yarn/underscore-1.13.1
  • dependabot/npm_and_yarn/ws-6.2.2
  • dependabot/npm_and_yarn/y18n-3.2.2
  • dev-9.0.0
  • docs-inspect-arr
  • docs-operators
  • docs-readme-add-freshet
  • docs-readme-whos-using
  • docs-security
  • docs-talboren
  • docs-testmulink
  • docs/ai
  • docs/cookieconsent
  • docs/english-polish
  • docs/github-links-and-docs-polish
  • docs/gtag-only-clean
  • docs/lambda-test
  • docs/readme-polish
  • docs/security-github-advisories
  • docs/testmu-ai
  • engine-aware-tokenizer-poc
  • export_specific_value_tokens_as_types
  • feat-async-scope
  • feat-string-first-last
  • feat/expose-types
  • feat_base64_filters
  • feature/884-add-sha256-and-hmac_sha256
  • feature/newline-filter
  • fix-140
  • fix-block-with-strictvariables
  • fix-break-inside-forloop
  • fix-consistent-range
  • fix-continue
  • fix-empty-tag-args
  • fix-filter-error
  • fix-fs-contains
  • fix-iterate-objects
  • fix-num-coerce
  • fix-release
  • fix-rfc2822-date
  • fix-timezones
  • fix-where-context
  • fix/base64-encode-buffer-support
  • fix/block-circular-reference-dos
  • fix/context-spawn-own-property-only
  • fix/date-strftime-width-dos
  • fix/disallow-scope-proto
  • fix/enforce-root-containment
  • fix/filter-prototype-rce
  • fix/join-memory-limit-output-size
  • fix/json-filters-memory-limit
  • fix/modulo-negative-sign
  • fix/own-property-only-inherited-array-indices
  • fix/own-property-only-magic-keys
  • fix/pop-filter-memory-limit
  • fix/render-include-recursion
  • fix/renderlimit-empty-for-loop
  • fix/replace-undefined-replacement
  • fix/sort-natural-own-property-only
  • fix/strip-html-newline-tags
  • fix/strip-html-redos
  • include-path
  • inner_expression_parentheses
  • inner_expression_parentheses_proposal
  • master
  • patch-1
  • patch-2
  • patch-3
  • perf-ast
  • perf-benchmark
  • perf-cross-engines
  • perf-memory
  • refactor-async
  • refactor-camelCase
  • refactor/shell-scripts-to-js
  • refs/heads/fix-filter-error
  • refs/heads/master
  • revert-615-tom/sed-macos
  • round_fix
  • static-analysis-alternate
  • test
  • v10
  • v7.0.1
  • v7.0.2
  • v9.26

06 Jul 2026 03:54PM UTC coverage: 99.548% (+0.003%) from 99.545%
28804690638

push

github

web-flow
fix: charge join/json/inspect filters by produced output size (#925)

* fix(filters): charge join/array_to_sentence_string by output size

join charged memoryLimit by array element count, not by the string it
produces, letting concat doubling (cheap reference copies) inflate an
array's element count and then materialize a huge string via join far
past the configured memoryLimit (GHSA-4r6h-5v86-94p3). Charge by the
sum of stringified element lengths plus separators before allocating.
Apply the same fix to the sibling array_to_sentence_string filter.

Co-authored-by: Cursor <cursoragent@cursor.com>

* refactor(filters): simplify join output-size accounting

Sum stringified element lengths in a single pass and keep the guarded
Array.prototype.join for the result, instead of building an intermediate
parts array.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(filters): charge json/jsonify/inspect serialization to memoryLimit

json/jsonify/inspect serialized values without charging memoryLimit, so
a concat-doubled array (cheap reference copies) could be materialized
into a huge JSON string past the configured limit — the same unbounded
class as the join bug (GHSA-4r6h-5v86-94p3). Charge via a JSON.stringify
replacer that accounts string lengths as it walks, aborting mid-
serialization instead of allocating the full blob first.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(memory): charge rendered output to memoryLimit at emission

Move output-length accounting into the emitters, which charge each
written chunk against ctx.memoryLimit right before it reaches the
result string or stream. Filters/tags now only pre-charge the extra
working memory they allocate apart from that output, so join drops its
bespoke output-size counting and charges array.length like its siblings.

The block.super capture emitter intentionally omits the limiter to
avoid double-counting content that is re-emitted through the final
emitter.

Co-authored-by: Cursor <cur... (continued)

1148 of 1160 branches covered (98.97%)

Branch coverage included in aggregate %.

26 of 26 new or added lines in 3 files covered. (100.0%)

3041 of 3048 relevant lines covered (99.77%)

21291.47 hits per line

Relevant lines Covered
Build:
Build:
3048 RELEVANT LINES 3041 COVERED LINES
21291.47 HITS PER LINE
Source Files on master
  • Tree
  • List 119
  • Changed 3
  • Source Changed 0
  • Coverage Changed 3
Coverage ∆ File Lines Relevant Covered Missed Hits/Line Branch Hits Branch Misses

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
28804690638 master fix: charge join/json/inspect filters by produced output size (#925) * fix(filters): charge join/array_to_sentence_string by output size join charged memoryLimit by array element count, not by the string it produces, letting concat doubling (che... push 06 Jul 2026 03:55PM UTC web-flow github
99.55
28804545283 fix/join-memory-limit-output-size Merge 5c9532ada into 552819a84 Pull #925 06 Jul 2026 03:52PM UTC web-flow github
99.55
28799962835 fix/join-memory-limit-output-size Merge 412efe6a3 into 552819a84 Pull #925 06 Jul 2026 02:42PM UTC web-flow github
99.48
28792953459 fix/join-memory-limit-output-size Merge bb7df7f0a into 552819a84 Pull #925 06 Jul 2026 12:54PM UTC web-flow github
99.55
28792035194 fix/join-memory-limit-output-size Merge a0103af11 into 552819a84 Pull #925 06 Jul 2026 12:38PM UTC web-flow github
99.55
28791298257 fix/join-memory-limit-output-size Merge 4ef0aa3fe into 552819a84 Pull #925 06 Jul 2026 12:25PM UTC web-flow github
99.55
28790598506 master fix: enforce ownPropertyOnly for inherited array indices (#924) * fix: enforce ownPropertyOnly for inherited array indices Route array index access (including negative indices, first/last, and the first/last filters) through a shared readArrayEl... push 06 Jul 2026 12:13PM UTC web-flow github
99.55
28790345279 fix/own-property-only-inherited-array-indices Merge c077b599e into 8bfb6428a Pull #924 06 Jul 2026 12:08PM UTC web-flow github
99.55
28788836962 fix/own-property-only-inherited-array-indices Merge 44ae46a64 into 8bfb6428a Pull #924 06 Jul 2026 11:40AM UTC web-flow github
99.55
28788444905 fix/own-property-only-inherited-array-indices Merge 7403bc2c8 into 8bfb6428a Pull #924 06 Jul 2026 11:33AM UTC web-flow github
99.55
See All Builds (1246)
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc