Skip to content

fix(typescript): restrict Nunjucks template execution#404

Merged
sethjuarez merged 2 commits into
mainfrom
sejuare-microsoft-fix-csharp-symlink-resolution
Jul 20, 2026
Merged

fix(typescript): restrict Nunjucks template execution#404
sethjuarez merged 2 commits into
mainfrom
sejuare-microsoft-fix-csharp-symlink-resolution

Conversation

@sethjuarez

Copy link
Copy Markdown
Member

Summary

  • enforce own-data-only member lookup and reject prototype traversal
  • prohibit template function calls and sanitize render inputs
  • add SSTI regression coverage and release 2.0.0-beta.5

Fixes GHSA-w28w-gp39-m4p6.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3ecadcae-f3dd-4e5f-9411-69eb69340d10
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3ecadcae-f3dd-4e5f-9411-69eb69340d10
@sethjuarez
sethjuarez merged commit 047756f into main Jul 20, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant