mirror of
https://github.com/discourse/discourse.git
synced 2025-01-08 21:04:29 +08:00
f0e73cb126
WS-2019-0064: Versions of handlebars prior to 4.0.14 are vulnerable to Prototype Pollution. Templates may alter an Objects prototype, thus allowing an attacker to execute arbitrary code on the server. |
||
|---|---|---|
| .. | ||
| highlightjs | ||
| moment-locale | ||
| moment-timezone-names-locale | ||
| babel.js | ||
| bootbox.js | ||
| bootstrap-modal.js | ||
| break_string.js | ||
| browser-update.js.erb | ||
| buffered-proxy.js | ||
| caret_position.js | ||
| ember-qunit.js | ||
| fake_xml_http_request.js | ||
| favcount.js | ||
| handlebars.js | ||
| handlebars.runtime.js | ||
| highlight.js | ||
| i18n-patches.js | ||
| intersection-observer.js | ||
| jquery.autoellipsis-1.0.10.js | ||
| jquery.ba-resize.js | ||
| jquery.color.js | ||
| jquery.cookie.js | ||
| jquery.fileupload.js | ||
| jquery.iframe-transport.js | ||
| jquery.js | ||
| jquery.putcursoratend.js | ||
| jquery.sortable.js | ||
| jquery.tagsinput.js | ||
| jquery.ui.widget.js | ||
| lodash.js | ||
| markdown-it.js | ||
| Markdown.Converter.js | ||
| moment-timezone-with-data.js | ||
| moment.js | ||
| mousetrap-global-bind.js | ||
| mousetrap.js | ||
| resumable.js | ||
| rsvp.js | ||
| show-html.js | ||
| sweetalert.js | ||
| virtual-dom-amd.js | ||
| virtual-dom.js | ||
| xss.min.js | ||