All pull requests

Pull requests

• Fix path traversal in FileSystemLoader via prefix-check bypass

  #25·iaohkut-from-NightWolf-Team opened Aug 25, 2026·

  ·
  1

• Fix uncontrolled resource consumption in repeat() used by center()/indent()

  #24·iaohkut-from-NightWolf-Team opened Aug 25, 2026·

  ·
  1

• Fix incomplete tag stripping in striptags filter enabling attribute-breakout XSS

  #23·iaohkut-from-NightWolf-Team opened Aug 25, 2026·

  ·
  1

• Fix stored/reflected XSS via urlize filter HTML attribute injection

  #22·iaohkut-from-NightWolf-Team opened Aug 25, 2026·

  ·
  1

• Fix prototype pollution in render Context via lib.extend()

  #21·iaohkut-from-NightWolf-Team opened Aug 25, 2026·

  ·
  1