New
pug@3.0.3
Bug Fixes
-
Update pug-code-gen with the following fix: (#3438)
Validate
templateNameandglobalsare valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options
Unclaimed project
Are you a maintainer of pug? Claim this project to take control of your public changelog and roadmap.
Update pug-code-gen with the following fix: (#3438)
Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options