Vulnerability Updates and Handlebars.dll Update

sachatrauwaen / OpenContent

Structured Content editing for DNN (Dotnetnuke)

46 stars 25 forks source link

Vulnerability Updates and Handlebars.dll Update #181

Open an-d-uu opened 2 years ago

an-d-uu commented 2 years ago

Update backbone from to 1.4.0 to correct Cross-site Scripting issue. (https://snyk.io/vuln/npm%3Abackbone)
Update Handlebars.ddl from 1.10.1 to 1.11.5 which bring the .dll to the latest version before breaking changes in 2.x.
Update handlebars.js from 4.0.5 to 4.7.7 to correct vulnerabilities. (https://snyk.io/test/npm/handlebars/4.0.5)

robheffo79 commented 2 months ago

Just an FYI: I am running a local test build of OC with Handlebars 2.1.6 compiled into it. There were literally only 2 changes needed to make it work.

Timo-Breumelhof commented 2 months ago

Just an FYI: I am running a local test build of OC with Handlebars 2.1.6 compiled into it. There were literally only 2 changes needed to make it work.

Are the changes you made the same as the ones in this PR?

an-d-uu commented 2 months ago

No, it was a very easy change to make this work. I believe at the time it was failing one of the automated tests, but you are right that there were only 2 changes to make this work.