handlebars-source 3.0.7 → 3.0.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f2aea31d96911fa9f0eddc2a856fc1aa07b6778e9d3132050f202ca61dcddb97
-  data.tar.gz: ec81549d2997bc8ccaf2930681094a59a6c2c90600f52ffde5fb0d38d454b8ef
+  metadata.gz: ff83f09a7e881e2c72d9e887460b22ce89dd07044af6d29e1def69e8fdfb8ea5
+  data.tar.gz: 586503d8604d486169e02026415366ff2909113a7cfc3bf801196673cac55d42
 SHA512:
-  metadata.gz: 1f67f4a247aaedd175cbabd39f2d8f787372029d0abc13e84e1c69f28c4c4f1bed8c99f69b510b08a57e7d0f549b19dfa16a048c9b538345a644fbe05d4ee78b
-  data.tar.gz: 9d30838812c234dc398c7b66818ff6e34635c9cde532f58145d25005267af4d51f34ce7710016deea152e30b78ed452106011e111094ca76cc19cbd8caaba0b6
+  metadata.gz: 0dcba16cc0aef31b2ea990cf9679b303f9dc8dc65f57b096138657f47874d41e4bc1a2e1a191830554d8e7a0c41508194d6d069af8c5f2da8d3e314eab96dbd0
+  data.tar.gz: 2b2245e7c5bac253b7660249c29c40617dd05ccf04a423355fae29daad082cf0e65c9106268a0c49e139da37af1858de27aa61acbb7e8725f9f0f8c679b1648d

data/handlebars.js

@@ -1,6 +1,6 @@
 /*!
 
- handlebars v3.0.7
+ handlebars v3.0.8
 
 Copyright (C) 2011-2014 by Yehuda Katz
 
@@ -497,7 +497,7 @@ return /******/ (function(modules) { // webpackBootstrap
 	    if (!obj) {
 	      return obj;
 	    }
-	    if (field === 'constructor' && !obj.propertyIsEnumerable(field)) {
+	    if (Utils.dangerousPropertyRegex.test(String(field)) && !Object.prototype.hasOwnProperty.call(obj, field)) {
 	      return undefined;
 	    }
 	    return obj[field];
@@ -656,6 +656,9 @@ return /******/ (function(modules) { // webpackBootstrap
 	  return (contextPath ? contextPath + '.' : '') + id;
 	}
 
+	var dangerousPropertyRegex = /^(constructor|__defineGetter__|__defineSetter__|__lookupGetter__|__proto__)$/;
+	exports.dangerousPropertyRegex = dangerousPropertyRegex;
+
 /***/ }),
 /* 6 */
 /***/ (function(module, exports, __webpack_require__) {
@@ -2971,13 +2974,18 @@ return /******/ (function(modules) { // webpackBootstrap
 	  // PUBLIC API: You can override these methods in a subclass to provide
 	  // alternative compiled forms for name lookup and buffering semantics
 	  nameLookup: function nameLookup(parent, name /* , type*/) {
-	    if (name === 'constructor') {
-	      return ['(', parent, '.propertyIsEnumerable(\'constructor\') ? ', parent, '.constructor : undefined', ')'];
+	    if (_utils.dangerousPropertyRegex.test(name)) {
+	      var isOwnProperty = [this.aliasable('Object.prototype.hasOwnProperty'), '.call(', parent, ',', JSON.stringify(name), ')'];
+	      return ['(', isOwnProperty, '?', _actualLookup(), ' : undefined)'];
 	    }
-	    if (JavaScriptCompiler.isValidJavaScriptVariableName(name)) {
-	      return [parent, '.', name];
-	    } else {
-	      return [parent, "['", name, "']"];
+	    return _actualLookup();
+
+	    function _actualLookup() {
+	      if (JavaScriptCompiler.isValidJavaScriptVariableName(name)) {
+	        return [parent, '.', name];
+	      } else {
+	        return [parent, '[', JSON.stringify(name), ']'];
+	      }
 	    }
 	  },
 	  depthedLookup: function depthedLookup(name) {

data/handlebars.runtime.js

@@ -1,6 +1,6 @@
 /*!
 
- handlebars v3.0.7
+ handlebars v3.0.8
 
 Copyright (C) 2011-2014 by Yehuda Katz
 
@@ -429,7 +429,7 @@ return /******/ (function(modules) { // webpackBootstrap
 	    if (!obj) {
 	      return obj;
 	    }
-	    if (field === 'constructor' && !obj.propertyIsEnumerable(field)) {
+	    if (Utils.dangerousPropertyRegex.test(String(field)) && !Object.prototype.hasOwnProperty.call(obj, field)) {
 	      return undefined;
 	    }
 	    return obj[field];
@@ -588,6 +588,9 @@ return /******/ (function(modules) { // webpackBootstrap
 	  return (contextPath ? contextPath + '.' : '') + id;
 	}
 
+	var dangerousPropertyRegex = /^(constructor|__defineGetter__|__defineSetter__|__lookupGetter__|__proto__)$/;
+	exports.dangerousPropertyRegex = dangerousPropertyRegex;
+
 /***/ }),
 /* 5 */
 /***/ (function(module, exports, __webpack_require__) {

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: handlebars-source
 version: !ruby/object:Gem::Version
-  version: 3.0.7
+  version: 3.0.8
 platform: ruby
 authors:
 - Yehuda Katz
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-06-30 00:00:00.000000000 Z
+date: 2020-02-23 00:00:00.000000000 Z
 dependencies: []
 description: Handlebars.js source code wrapper for (pre)compilation gems.
 email:
@@ -39,8 +39,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 3.0.6
 signing_key: 
 specification_version: 4
 summary: Handlebars.js source code wrapper