diff options
| author | Kevin Decker <kpdecker@gmail.com> | 2015-09-04 15:18:25 -0500 |
|---|---|---|
| committer | Kevin Decker <kpdecker@gmail.com> | 2015-09-04 15:18:25 -0500 |
| commit | 9a86e40970770579f7da1d608b4b6c0bb110350a (patch) | |
| tree | fcf90a0a15f4bba8e73d3fca7f5da0a2a23be68d /release-notes.md | |
| parent | a5a3ab01d3659b996234e3fa5a4a32350a145096 (diff) | |
| parent | 3696d23752a86991a623392b29881965779eb301 (diff) | |
| download | handlebars.js-9a86e40970770579f7da1d608b4b6c0bb110350a.zip handlebars.js-9a86e40970770579f7da1d608b4b6c0bb110350a.tar.gz handlebars.js-9a86e40970770579f7da1d608b4b6c0bb110350a.tar.bz2 | |
Merge pull request #1090 from nikolas/patch-1
grammar fixes in 4.0.0 release notes
Diffstat (limited to 'release-notes.md')
| -rw-r--r-- | release-notes.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/release-notes.md b/release-notes.md index 822cb80..b254729 100644 --- a/release-notes.md +++ b/release-notes.md @@ -50,7 +50,7 @@ - Fix location information for programs - [93faffa](https://github.com/wycats/handlebars.js/commit/93faffa) Compatibility notes: -- Depthed paths are now conditional pushed on to the stack. If the helper uses the same context, then a new stack is not created. This leads to behavior the better matches expectations for helpers like `if` that do not seem to alter the context. Any instances of `../` in templates will need to be checked for the correct behavior under 4.0.0. In general templates will either reduce the number of `../` instances or leave them as is. See [#1028](https://github.com/wycats/handlebars.js/issues/1028). +- Depthed paths are now conditionally pushed on to the stack. If the helper uses the same context, then a new stack is not created. This leads to behavior that better matches expectations for helpers like `if` that do not seem to alter the context. Any instances of `../` in templates will need to be checked for the correct behavior under 4.0.0. In general templates will either reduce the number of `../` instances or leave them as is. See [#1028](https://github.com/wycats/handlebars.js/issues/1028). - The `=` character is now HTML escaped. This closes a potential exploit case when using unquoted attributes, i.e. `<div foo={{bar}}>`. In general it's recommended that attributes always be quoted when their values are generated from a mustache to avoid any potential exploit surfaces. - AST constructors have been dropped in favor of plain old javascript objects - The runtime version has been increased. Precompiled templates will need to use runtime of at least 4.0.0. |