harttle / liquidjs

100%

LAST BUILD ON BRANCH master

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• 833_Support-Value-Expressions-as-Operands-in-Conditional-and-Loop-Tags
• 868_null_date
• 871_rounding_negative_half
• MorielHarush-master
• all-contributors/add-CriGoT
• all-contributors/add-JasonEtco
• all-contributors/add-Pixcell
• all-contributors/add-TrySound
• all-contributors/add-ameyaapte1
• all-contributors/add-bangank36
• all-contributors/add-bobgubko
• all-contributors/add-hongl-1
• all-contributors/add-jamelait
• all-contributors/add-mahyar-pasarzangene
• all-contributors/add-mastodon0
• all-contributors/add-prassie
• all-contributors/add-santialbo
• all-contributors/add-zxx-457
• chore-chai2jest
• chore-github-actions
• chore-pr-title-checker
• dbg
• dependabot/npm_and_yarn/acorn-6.4.1
• dependabot/npm_and_yarn/ansi-regex-3.0.1
• dependabot/npm_and_yarn/async-3.2.3
• dependabot/npm_and_yarn/decode-uri-component-0.2.2
• dependabot/npm_and_yarn/docs/ajv-6.12.6
• dependabot/npm_and_yarn/docs/ansi-regex-4.1.1
• dependabot/npm_and_yarn/docs/decode-uri-component-0.2.2
• dependabot/npm_and_yarn/docs/glob-parent-5.1.2
• dependabot/npm_and_yarn/docs/highlight.js-9.18.5
• dependabot/npm_and_yarn/docs/lodash-4.17.19
• dependabot/npm_and_yarn/docs/lodash-4.17.21
• dependabot/npm_and_yarn/docs/minimatch-3.1.2
• dependabot/npm_and_yarn/docs/minimist-and-hexo-renderer-swig-1.2.7
• dependabot/npm_and_yarn/docs/moment-2.29.2
• dependabot/npm_and_yarn/docs/moment-2.29.4
• dependabot/npm_and_yarn/docs/moment-timezone-0.5.37
• dependabot/npm_and_yarn/docs/path-parse-1.0.7
• dependabot/npm_and_yarn/docs/prismjs-1.21.0
• dependabot/npm_and_yarn/docs/prismjs-1.23.0
• dependabot/npm_and_yarn/docs/prismjs-1.24.0
• dependabot/npm_and_yarn/docs/prismjs-1.25.0
• dependabot/npm_and_yarn/docs/prismjs-1.27.0
• dependabot/npm_and_yarn/docs/pug-code-gen-2.0.3
• dependabot/npm_and_yarn/docs/terser-4.8.1
• dependabot/npm_and_yarn/docs/y18n-4.0.1
• dependabot/npm_and_yarn/elliptic-6.5.3
• dependabot/npm_and_yarn/elliptic-6.5.4
• dependabot/npm_and_yarn/eslint-utils-1.4.3
• dependabot/npm_and_yarn/got-and-semantic-release/npm--removed
• dependabot/npm_and_yarn/handlebars-4.5.3
• dependabot/npm_and_yarn/handlebars-4.7.7
• dependabot/npm_and_yarn/highlight.js-9.18.5
• dependabot/npm_and_yarn/hosted-git-info-2.8.9
• dependabot/npm_and_yarn/https-proxy-agent-2.2.4
• dependabot/npm_and_yarn/ini-1.3.7
• dependabot/npm_and_yarn/ini-1.3.8
• dependabot/npm_and_yarn/jquery-3.5.0
• dependabot/npm_and_yarn/jsdom-16.5.0
• dependabot/npm_and_yarn/minimatch-3.1.2
• dependabot/npm_and_yarn/minimist-1.2.6
• dependabot/npm_and_yarn/nanoid-3.3.1
• dependabot/npm_and_yarn/node-fetch-2.6.1
• dependabot/npm_and_yarn/node-fetch-2.6.7
• dependabot/npm_and_yarn/npm-6.13.4
• dependabot/npm_and_yarn/npm-6.14.6
• dependabot/npm_and_yarn/npm-user-validate-1.0.1
• dependabot/npm_and_yarn/path-parse-1.0.7
• dependabot/npm_and_yarn/path-parse-and-path-parse-1.0.7
• dependabot/npm_and_yarn/pathval-1.1.1
• dependabot/npm_and_yarn/semantic-release-17.2.3
• dependabot/npm_and_yarn/semantic-release-19.0.3
• dependabot/npm_and_yarn/semver-regex-3.1.4
• dependabot/npm_and_yarn/shelljs-0.8.5
• dependabot/npm_and_yarn/ssri-6.0.2
• dependabot/npm_and_yarn/tar-4.4.19
• dependabot/npm_and_yarn/trim-off-newlines-1.0.3
• dependabot/npm_and_yarn/underscore-1.13.1
• dependabot/npm_and_yarn/ws-6.2.2
• dependabot/npm_and_yarn/y18n-3.2.2
• dev-9.0.0
• docs-inspect-arr
• docs-operators
• docs-readme-add-freshet
• docs-readme-whos-using
• docs-security
• docs-talboren
• docs-testmulink
• docs/lambda-test
• docs/testmu-ai
• engine-aware-tokenizer-poc
• export_specific_value_tokens_as_types
• feat-async-scope
• feat-string-first-last
• feat/expose-types
• feat_base64_filters
• feature/884-add-sha256-and-hmac_sha256
• feature/newline-filter
• fix-140
• fix-block-with-strictvariables
• fix-break-inside-forloop
• fix-consistent-range
• fix-continue
• fix-empty-tag-args
• fix-filter-error
• fix-fs-contains
• fix-iterate-objects
• fix-num-coerce
• fix-release
• fix-rfc2822-date
• fix-timezones
• fix-where-context
• fix/base64-encode-buffer-support
• fix/block-circular-reference-dos
• fix/context-spawn-own-property-only
• fix/enforce-root-containment
• fix/replace-undefined-replacement
• fix/sort-natural-own-property-only
• fix/strip-html-newline-tags
• include-path
• inner_expression_parentheses
• inner_expression_parentheses_proposal
• master
• patch-1
• patch-2
• patch-3
• perf-ast
• perf-benchmark
• perf-cross-engines
• perf-memory
• refactor-async
• refactor-camelCase
• refactor/shell-scripts-to-js
• refs/heads/fix-filter-error
• refs/heads/master
• revert-615-tom/sed-macos
• static-analysis-alternate
• test
• v10
• v7.0.1
• v7.0.2
• v9.26

Build # 25281962657

Build Type

push

github

Committed by web-flow

Commit Message

fix: propagate ownPropertyOnly into Context.spawn() for {% render %} (#893)

Child contexts from spawn() re-derived ownPropertyOnly from Liquid opts
only, dropping per-render RenderOptions overrides. That broke the contract
that parseAndRender(..., { ownPropertyOnly: true }) locks down a single
render, including partials loaded via {% render %}.

Add regression test matching prototype-chain leak PoC.

Co-authored-by: Cursor <cursoragent@cursor.com>

Coverage Stats

1124 of 1135 branches covered (99.03%)

Branch coverage included in aggregate %.

2983 of 2990 relevant lines covered (99.77%)

19919.66 hits per line