compiled templates contain information about the server's directory structure

bminer / node-blade

Blade - HTML Template Compiler, inspired by Jade & Haml

Other

320 stars 28 forks source link

Closed schlundd closed 11 years ago

schlundd commented 11 years ago

Hi,

I am using the express middleware to fetch compiled templates. I noticed they contain information about the server's directory structure:

__.base="/home/ubuntu/ebb-mdb/views", 
__.filename="/home/ubuntu/ebb-mdb/views/index.blade"

I wonder whether these fields are necessary for the client side rendering, since they may contain hints for possible attacks.

bminer commented 11 years ago

@schlundd - Good point. Try now. This should now be fixed.

schlundd commented 11 years ago

That was quick, thanks :-). Updated without problems and issue is solved.