html-webpack-plugin 5.6.4 → 5.6.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/index.js +19 -56
  2. package/package.json +3 -2
package/index.js CHANGED
@@ -632,62 +632,25 @@ class HtmlWebpackPlugin {
632
632
  const templateWithoutLoaders = templateFilename
633
633
  .replace(/^.+!/, "")
634
634
  .replace(/\?.+$/, "");
635
- const vmContext = vm.createContext({
636
- ...global,
637
- HTML_WEBPACK_PLUGIN: true,
638
- require: require,
639
- htmlWebpackPluginPublicPath: publicPath,
640
- __filename: templateWithoutLoaders,
641
- __dirname: path.dirname(templateWithoutLoaders),
642
- AbortController: global.AbortController,
643
- AbortSignal: global.AbortSignal,
644
- Blob: global.Blob,
645
- Buffer: global.Buffer,
646
- ByteLengthQueuingStrategy: global.ByteLengthQueuingStrategy,
647
- BroadcastChannel: global.BroadcastChannel,
648
- CompressionStream: global.CompressionStream,
649
- CountQueuingStrategy: global.CountQueuingStrategy,
650
- Crypto: global.Crypto,
651
- CryptoKey: global.CryptoKey,
652
- CustomEvent: global.CustomEvent,
653
- DecompressionStream: global.DecompressionStream,
654
- Event: global.Event,
655
- EventTarget: global.EventTarget,
656
- File: global.File,
657
- FormData: global.FormData,
658
- Headers: global.Headers,
659
- MessageChannel: global.MessageChannel,
660
- MessageEvent: global.MessageEvent,
661
- MessagePort: global.MessagePort,
662
- PerformanceEntry: global.PerformanceEntry,
663
- PerformanceMark: global.PerformanceMark,
664
- PerformanceMeasure: global.PerformanceMeasure,
665
- PerformanceObserver: global.PerformanceObserver,
666
- PerformanceObserverEntryList: global.PerformanceObserverEntryList,
667
- PerformanceResourceTiming: global.PerformanceResourceTiming,
668
- ReadableByteStreamController: global.ReadableByteStreamController,
669
- ReadableStream: global.ReadableStream,
670
- ReadableStreamBYOBReader: global.ReadableStreamBYOBReader,
671
- ReadableStreamBYOBRequest: global.ReadableStreamBYOBRequest,
672
- ReadableStreamDefaultController: global.ReadableStreamDefaultController,
673
- ReadableStreamDefaultReader: global.ReadableStreamDefaultReader,
674
- Response: global.Response,
675
- Request: global.Request,
676
- SubtleCrypto: global.SubtleCrypto,
677
- DOMException: global.DOMException,
678
- TextDecoder: global.TextDecoder,
679
- TextDecoderStream: global.TextDecoderStream,
680
- TextEncoder: global.TextEncoder,
681
- TextEncoderStream: global.TextEncoderStream,
682
- TransformStream: global.TransformStream,
683
- TransformStreamDefaultController: global.TransformStreamDefaultController,
684
- URL: global.URL,
685
- URLSearchParams: global.URLSearchParams,
686
- WebAssembly: global.WebAssembly,
687
- WritableStream: global.WritableStream,
688
- WritableStreamDefaultController: global.WritableStreamDefaultController,
689
- WritableStreamDefaultWriter: global.WritableStreamDefaultWriter,
690
- });
635
+ const globalClone = Object.create(
636
+ Object.getPrototypeOf(global),
637
+ Object.getOwnPropertyDescriptors(global),
638
+ );
639
+ // Presence of `eval` and `Function` breaks template's explicit `eval` call
640
+ // Ref: https://github.com/nodejs/help/issues/2880
641
+ delete globalClone.eval;
642
+ delete globalClone.Function;
643
+ // Not using `...global` as it throws when localStorage is not explicitly enabled in Node 25+
644
+ const vmContext = vm.createContext(
645
+ Object.assign(globalClone, {
646
+ HTML_WEBPACK_PLUGIN: true,
647
+ // Copying nonstandard globals like `require` explicitly as they may be absent from `global`
648
+ require: require,
649
+ htmlWebpackPluginPublicPath: publicPath,
650
+ __filename: templateWithoutLoaders,
651
+ __dirname: path.dirname(templateWithoutLoaders),
652
+ }),
653
+ );
691
654
 
692
655
  const vmScript = new vm.Script(source, {
693
656
  filename: templateWithoutLoaders,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "html-webpack-plugin",
3
- "version": "5.6.4",
3
+ "version": "5.6.6",
4
4
  "license": "MIT",
5
5
  "description": "Simplifies creation of HTML files to serve your webpack bundles",
6
6
  "author": "Jan Nicklas <j.nicklas@me.com> (https://github.com/jantimon)",
@@ -44,6 +44,7 @@
44
44
  "cz-conventional-changelog": "2.1.0",
45
45
  "dir-compare": "^3.3.0",
46
46
  "eslint": "^8.56.0",
47
+ "handlebars-loader": "^1.7.3",
47
48
  "html-loader": "2.1.1",
48
49
  "husky": "^9.0.10",
49
50
  "jest": "^27.2.5",
@@ -58,7 +59,7 @@
58
59
  "standard-version": "^9.3.0",
59
60
  "style-loader": "2.0.0",
60
61
  "typescript": "4.9.4",
61
- "webpack": "^5.101.0",
62
+ "webpack": "^5.104.1",
62
63
  "webpack-cli": "4.5.0",
63
64
  "webpack-recompilation-simulator": "3.2.0"
64
65
  },