Ankit Patial
621f8def47
Security fixes: - Add path traversal protection in include/extends (rejects '..' and absolute paths) - Add configurable max_include_depth option (default: 100) to prevent infinite recursion - New error types: MaxIncludeDepthExceeded, PathTraversalDetected Test cleanup: - Disable check_list tests requiring unimplemented features (JS eval, filters, file includes) - Keep 23 passing static content tests Bump version to 0.2.2
6 lines
225 B
HTML
6 lines
225 B
HTML
<foo attr="<%= bar %>"></foo>
|
|
<foo class="<%= bar %>"></foo>
|
|
<foo attr="<%= bar %>"></foo>
|
|
<foo class="<%= bar %>"></foo>
|
|
<foo class="<%= bar %> lol rofl"></foo>
|
|
<foo class="<%= bar %> lol rofl <%= lmao %>"></foo> |