jan
/
mustache.js
镜像来自 https://github.com/janl/mustache.js
關注 1
收藏 0
複製 0
程式碼 問題 0 版本發佈 46 Wiki 活動
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
723 提交
19 分支
33MB
目錄樹: efdeb55202
分支列表 標籤
${ item.name }
建立分支 ${ searchTerm }
從 'efdeb55202'
${ noResults }
mustache.js/test/_files/malicious_template.mustache

malicious_template.mustache 203B
原始文件 Normal View 歷史記錄

Use @cweider's quoting function Also fixed a bug that occurs when using the triple-stache with a key that contains a closing stache. Fixes #192.
14 年之前
​
​
​
​
 12345 
  1. {{"+(function () {throw "evil"})()+"}}

  2. {{{"+(function () {throw "evil"})()+"}}}

  3. {{> "+(function () {throw "evil"})()+"}}

  4. {{# "+(function () {throw "evil"})()+"}}

  5. {{/ "+(function () {throw "evil"})()+"}}