@rhinostone/swig-twig 2.8.2 → 2.8.4

package/lib/index.js

@@ -27,7 +27,7 @@ exports.name = 'twig';
  *
  * @type {String}
  */
-exports.version = "2.8.2";
+exports.version = "2.8.4";
 
 /**
  * Expression-level parser — Pratt-style recursive descent that consumes

package/lib/tags/include.js

@@ -28,8 +28,8 @@
  * `try { ... } catch {}` wrapper that collapses missing-file errors to
  * the empty string when `ignoreMissing` is set.
  *
- * `resolveFrom` is the template's own filename (backslash-escaped so
- * Windows paths round-trip through the JSON-literal emit). The native
+ * `resolveFrom` is the template's own filename; the backend escapes it at emit time
+ * (GHSA-q89c), so Windows paths and quotes round-trip through the literal. The native
  * parser's splitter passes it in as a trailing arg; Twig's
  * tag-dispatch shape carries it via `opts.filename`.
  */
@@ -125,7 +125,7 @@ exports.parse = function (str, line, parser, types, stack, opts, swig, token) {
     ctxExpr = parser.parseExpr(ctxTokens);
   }
 
-  var resolveFrom = (opts.filename || '').replace(/\\/g, '\\\\');
+  var resolveFrom = (opts.filename || '');
 
   token.irExpr = ir.include(
     pathExpr,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rhinostone/swig-twig",
-  "version": "2.8.2",
+  "version": "2.8.4",
   "description": "Twig-syntax frontend for the @rhinostone/swig-core template engine. Part of the @rhinostone/swig multi-flavor family.",
   "keywords": [
     "template",
@@ -22,7 +22,7 @@
     "node": ">=12"
   },
   "peerDependencies": {
-    "@rhinostone/swig-core": "2.8.2"
+    "@rhinostone/swig-core": "2.8.4"
   },
   "publishConfig": {
     "access": "public"