node-blade

node-blade copied to clipboard

Remove Live UI

14

Meteor has apparently dropped Spark. Is Live UI plugin still relevant?

punund

special characters in attribute names

4

Certain frameworks rely on specifically crafted attributes: ````html ```` However, blade fails if given button(v-on:submit.prevent="foo") This wouldn't work either: button(@attr="foo")

punund

koajs support

2

MetaMemoryT

Prevent injecting JavaScript into `href` attribute on `a` tag

2

Prevent stuff like `blah`

bminer

``` img(src="/image.png"alt="") ``` throws a compilation error. AST looks like this: ``` AST: { doctypes: [], nodes: [ { type: 'tag', name: 'img', id: null, classes: [], attributes: { src:...

bminer

Better Reporting for Syntax Errors

11

If there is a problem with the Blade compiler, or more likely, if there is a syntax error with the JavaScript code in a template, Node.js will not provide any...

bminer

Support render foo()#id.class?

1

It seems reasonable to expect this to work: ``` render foo("..")#id.class ``` given the similar format in ``` call dialog("Blade is awesome")#foobar.foo.bar ``` I imagine it would attach #id.class to...

braco

vulnerable undefined property lookup that escalating prototype pollution to remote code execution

3

Hi there! I've identified several prototype pollution gadgets within the `node-blade` template engine that could potentially be leveraged by attackers to achieve remote code execution via prototype pollution vulnerabilities. **In...

jackfromeast

This project hasn't been maintained in a long time and has unfortunately accumulated a fair amount of technical debt. Additionally, I will be abandoning the `blade` project name in the...

bminer