express-hbs 2.4.2 → 2.5.1

package/.claude/worktrees/security-patches-review-c621ea/lib/resolver.js

@@ -0,0 +1,59 @@
+'use strict';
+
+var generateId = require('./generate-id');
+
+var ID_LENGTH = 8;
+var ID_PREFIX = '__aSyNcId__';
+
+// NOTE: We must include a character which is escaped by Handlebars in the "async id"
+// This is so that when using an async helper "inline", such as {{asyncHelper "foo"}}
+// the content is correctly escaped depending on whether double or triple braces.
+var ID_ESCAPED_STRING = '<_';
+
+var ID_SUFFIX = '__';
+
+function resolve(cache, fn, context) {
+  var id = ID_PREFIX + ID_ESCAPED_STRING + generateId(ID_LENGTH) + ID_SUFFIX;
+  cache[id] = new Promise(function (passed, failed) {
+    try {
+      fn(context, function (res) {
+        passed(res);
+      });
+    } catch (error) {
+      failed(error);
+    }
+  });
+  return id;
+}
+
+// cache is an object where the keys are cache keys and values are promises. See above.
+function done(cache, callback) {
+  return Promise.all(Object.values(cache))
+    .then(function (values) {
+      var resolvedCache = {};
+      var keys = Object.keys(cache);
+      values.forEach(function (value, index) {
+        resolvedCache[keys[index]] = value;
+      });
+      callback(null, resolvedCache);
+    })
+    .catch(function (error) {
+      callback(error);
+    });
+}
+
+function hasResolvers(text) {
+  // NOTE: We specifically search the text for the ID_PREFIX **NOT** including the escapable character
+  // This is because that character can be escaped in the text, and lead us to not finding unresolved
+  // async helper outputs.
+  if (text.search(ID_PREFIX) >= 0) {
+    return true;
+  }
+  return false;
+}
+
+module.exports = {
+  done: done,
+  hasResolvers: hasResolvers,
+  resolve: resolve,
+};

package/.claude/worktrees/security-patches-review-c621ea/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "express-hbs",
+  "version": "3.0.0",
+  "description": "Express handlebars template engine complete with multiple layouts, partials and blocks.",
+  "keywords": [
+    "express4",
+    "express",
+    "handlebars",
+    "layout",
+    "partials"
+  ],
+  "main": "index.js",
+  "engines": {
+    "node": ">=22"
+  },
+  "directories": {
+    "example": "example"
+  },
+  "scripts": {
+    "lint": "oxlint --quiet && oxfmt --check .",
+    "lint:fix": "oxlint --fix && oxfmt .",
+    "format": "oxfmt .",
+    "test": "mocha",
+    "posttest": "pnpm lint",
+    "coverage": "nyc --check-coverage mocha",
+    "preship": "pnpm test",
+    "ship": "pro-ship"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/TryGhost/express-hbs"
+  },
+  "bugs": "https://github.com/TryGhost/express-hbs/issues",
+  "author": "Mario Gutierrez <mario@barc.com>",
+  "license": "MIT",
+  "devDependencies": {
+    "cookie-parser": "1.4.7",
+    "express": "5.3.0",
+    "i18n": "0.15.4",
+    "mocha": "12.0.3",
+    "nyc": "18.0.0",
+    "oxfmt": "0.76.0",
+    "oxlint": "1.91.0",
+    "rewire": "9.0.1",
+    "supertest": "7.3.2"
+  },
+  "dependencies": {
+    "@tryghost/pro-ship": "2.0.1",
+    "handlebars": "4.7.10",
+    "lodash": "4.18.1",
+    "readdirp": "3.6.0"
+  },
+  "optionalDependencies": {
+    "js-beautify": "^2.0.0"
+  },
+  "packageManager": "pnpm@12.18.0+sha512.9d7882d5dc82147ecfc4e062aa34834e0ad0296710a1837a1115ae012127d36b7109e321ac1598a1dd0a65597681b1e99917e12ed0d749eae91187943363beb3"
+}