summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNik Nyby <nnyby@columbia.edu>2015-09-04 15:47:52 -0400
committerNik Nyby <nnyby@columbia.edu>2015-09-04 15:47:52 -0400
commit3696d23752a86991a623392b29881965779eb301 (patch)
treefcf90a0a15f4bba8e73d3fca7f5da0a2a23be68d
parenta5a3ab01d3659b996234e3fa5a4a32350a145096 (diff)
downloadhandlebars.js-3696d23752a86991a623392b29881965779eb301.zip
handlebars.js-3696d23752a86991a623392b29881965779eb301.tar.gz
handlebars.js-3696d23752a86991a623392b29881965779eb301.tar.bz2
grammar fixes in 4.0.0 release notes
-rw-r--r--release-notes.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/release-notes.md b/release-notes.md
index 822cb80..b254729 100644
--- a/release-notes.md
+++ b/release-notes.md
@@ -50,7 +50,7 @@
- Fix location information for programs - [93faffa](https://github.com/wycats/handlebars.js/commit/93faffa)
Compatibility notes:
-- Depthed paths are now conditional pushed on to the stack. If the helper uses the same context, then a new stack is not created. This leads to behavior the better matches expectations for helpers like `if` that do not seem to alter the context. Any instances of `../` in templates will need to be checked for the correct behavior under 4.0.0. In general templates will either reduce the number of `../` instances or leave them as is. See [#1028](https://github.com/wycats/handlebars.js/issues/1028).
+- Depthed paths are now conditionally pushed on to the stack. If the helper uses the same context, then a new stack is not created. This leads to behavior that better matches expectations for helpers like `if` that do not seem to alter the context. Any instances of `../` in templates will need to be checked for the correct behavior under 4.0.0. In general templates will either reduce the number of `../` instances or leave them as is. See [#1028](https://github.com/wycats/handlebars.js/issues/1028).
- The `=` character is now HTML escaped. This closes a potential exploit case when using unquoted attributes, i.e. `<div foo={{bar}}>`. In general it's recommended that attributes always be quoted when their values are generated from a mustache to avoid any potential exploit surfaces.
- AST constructors have been dropped in favor of plain old javascript objects
- The runtime version has been increased. Precompiled templates will need to use runtime of at least 4.0.0.