pebble issues

Vulnerability CVE-2022-37767

38

Hello, since this morning security checks in our projects are reporting new critical vulnerability in the current pebble version 3.1.5: NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-37767 Original report: https://github.com/Y4tacker/Web-Security/issues/3 Any short-term workaround to mitigate...

pelece

Fix #595 : Numeric operator overflow

4

Initial pull request that just fixes the comparison operators and could be greatly improved by: - Merging type specific checks with the already type specific arithmetic operators, applying this fix...

codesplode

Added option to allow access to entire ScopeChain from within macros. Default behavior is as before

3

* Added configuration variable ``globalScoping`` to ``pebble/src/main/java/com/mitchellbosecke/pebble/PebbleEngine.java:66`` which effectively allows macros to be able to access variables in the entire scope chain. * Added unit test case for the same....

SharkFourSix

Pebble-support in emacs exists now

To use pebble in Emacs, you can load https://github.com/DisyInformationssysteme/pebble-mode Inclusion in melpa is work in progress.

ArneBab

[BUG] doesn't escape XXS inside embed block

inside embed block ``` {% embed %} {% endembed %} ``` even if the string inside the bracket is XXS code written in javascript, it doesn't escape and execute the...

ShanePark

[Question] Is there a way to see all defined variables in a template?

For example, I am adding userName to the model and I know I can access the value by {{ userName }} in my template. But I want to list all...

Zalimben

Cannot use methods that have an operator with the same name

2

I can't do `something.contains("abc")` because there is an operator called `contains` which requires me to do `something contains "abc"`. This is a very serious issue because you can't use methods...

ogrammer

Newline trimmed unexpectedly

3

Hi, during my migration from jtwig to pebble I've noticed some odd behaviour: sometimes newlines are trimmed. Here is a test case to reproduce the issue: ``` import com.mitchellbosecke.pebble.PebbleEngine import...

crummy