web-mode icon indicating copy to clipboard operation
web-mode copied to clipboard

Published 20 hours ago • verified publisher icon fxbois

Fix ‘{{~’ completion for Handlebars

Open andersk opened this issue 2 years ago • 0 comments

We should not autocomplete {{~ to {{~{ | }}}, as that unexpectedly disables HTML escaping in Handlebars, leading to cross-site scripting vulnerabilities.

Instead, autocomplete {{~  to {{~ | }} and {{~{ to {{~{ | }}}.

andersk avatar Jun 29 '22 23:06 andersk