OpenContent icon indicating copy to clipboard operation
OpenContent copied to clipboard

Vulnerability Updates and Handlebars.dll Update

Open an-d-uu opened this issue 4 years ago • 3 comments

  • Update backbone from to 1.4.0 to correct Cross-site Scripting issue. (https://snyk.io/vuln/npm%3Abackbone)
  • Update Handlebars.ddl from 1.10.1 to 1.11.5 which bring the .dll to the latest version before breaking changes in 2.x.
  • Update handlebars.js from 4.0.5 to 4.7.7 to correct vulnerabilities. (https://snyk.io/test/npm/handlebars/4.0.5)

an-d-uu avatar Nov 17 '21 20:11 an-d-uu

Just an FYI: I am running a local test build of OC with Handlebars 2.1.6 compiled into it. There were literally only 2 changes needed to make it work.

robheffo79 avatar Jun 11 '24 01:06 robheffo79

Just an FYI: I am running a local test build of OC with Handlebars 2.1.6 compiled into it. There were literally only 2 changes needed to make it work.

Are the changes you made the same as the ones in this PR?

Timo-Breumelhof avatar Jun 11 '24 08:06 Timo-Breumelhof

No, it was a very easy change to make this work. I believe at the time it was failing one of the automated tests, but you are right that there were only 2 changes to make this work.

an-d-uu avatar Jun 11 '24 13:06 an-d-uu