Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: jknack/handlebars.java
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v4.5.2
Choose a base ref
...
head repository: jknack/handlebars.java
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v4.5.3
Choose a head ref
  • 6 commits
  • 17 files changed
  • 1 contributor

Commits on Jun 27, 2026

  1. Change in behavior for implicit params in partials in handlebars 4.5.2 … 

    …fix #1182
    @jknack
    jknack committed Jun 27, 2026
    Configuration menu
    Copy the full SHA
    c958550 View commit details
    Browse the repository at this point in the history

Commits on Jun 28, 2026

  1. Fix path traversal and suffix bypass in Spring MVC integration 

    - Remove dynamic protocol resolution in SpringTemplateLoader.
- Enforce logical boundaries to prevent path traversal in template resolution.
- Validate resolved URLs to block fragment (#) and query (?) injection bypasses.
- Reject unsafe view names containing `..`, `:`, or `#` in HandlebarsViewResolver.
    @jknack
    jknack committed Jun 28, 2026
    Configuration menu
    Copy the full SHA
    61f4342 View commit details
    Browse the repository at this point in the history

  2. build: fix failing tests on windows OS

    @jknack
    jknack committed Jun 28, 2026
    Configuration menu
    Copy the full SHA
    3e27b0b View commit details
    Browse the repository at this point in the history

Commits on Jun 30, 2026

  1. Merge commit from fork 

    Fix path traversal and suffix bypass in Spring MVC integration
    @jknack
    jknack authored Jun 30, 2026
    Configuration menu
    Copy the full SHA
    7bc9061 View commit details
    Browse the repository at this point in the history

  2. v4.5.3

    @jknack
    jknack committed Jun 30, 2026
    Configuration menu
    Copy the full SHA
    0a9e359 View commit details
    Browse the repository at this point in the history

  3. build: fix windows OS failing test

    @jknack
    jknack committed Jun 30, 2026
    Configuration menu
    Copy the full SHA
    a733ae1 View commit details
    Browse the repository at this point in the history
Loading