handlebars < 4 has security vulnerability; updating to the latest version

jsdoc2md / dmd

The default output template for jsdoc2md

MIT License

39 stars 50 forks source link

handlebars < 4 has security vulnerability; updating to the latest version #35

Closed kwiatkk1 closed 7 years ago

kwiatkk1 commented 7 years ago

handlebars 3.0.3 has known vulnerabilities (both on its own and in its dependencies)
updating to 4 seems to be painless (all tests pass; jsdoc-to-markdown generates valid output)

75lb commented 7 years ago

thanks, but i won't be upgrading yet.. upgrading to handlebars 4 requires a lot more changes than this - in fact, it's quite a lot of work.. i know because i attempted it once before..

security is not an issue.

75lb commented 6 years ago

handlebars upgraded in the latest release of dmd (v3.0.7).