nodejs-handlebars/CVE-2021-23383.patch
2021-05-21 17:01:44 +08:00

31 lines
878 B
Diff

From 4f844f2b439aa94d88dae0567401c4880e53bfac Mon Sep 17 00:00:00 2001
From: jackie_wu <wutao61@huawei.com>
Date: Thu, 20 May 2021 16:21:57 +0800
Subject: [PATCH] add2
---
lib/handlebars/compiler/javascript-compiler.js | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/lib/handlebars/compiler/javascript-compiler.js b/lib/handlebars/compiler/javascript-compiler.js
index ff98ad9..757b594 100644
--- a/lib/handlebars/compiler/javascript-compiler.js
+++ b/lib/handlebars/compiler/javascript-compiler.js
@@ -23,7 +23,12 @@ JavaScriptCompiler.prototype = {
}
},
depthedLookup: function(name) {
- return [this.aliasable('container.lookup'), '(depths, "', name, '")'];
+ return [
+ this.aliasable('container.lookup'),
+ '(depths, ',
+ JSON.stringify(name),
+ ')'
+ ];
},
compilerInfo: function() {
--
2.23.0