SECURITY: Backported XSS fixes from Handlebars

2025-02-25 18:55:32 -06:00 · 2015-11-24 16:07:47 -05:00
parent f4d44187c8
commit 434deb1bd3
22 changed files with 70 additions and 30 deletions
--- a/lib/freedom_patches/ember_compat_handlebars.rb
+++ b/lib/freedom_patches/ember_compat_handlebars.rb
@@ -5,7 +5,7 @@ module Barber
  class EmberCompatPrecompiler < Barber::Precompiler

    def sources
-      [handlebars, precompiler]
+      [File.open("#{Rails.root}/vendor/assets/javascripts/handlebars.js"), precompiler]
    end

    def precompiler