capc0

sec. vuln.: brackets {{ and }} in URL can trigger template engine

10

If any request constains `{{` or `}}` in the URL, e.g. `http://url.tld?param={{dummy}}` the following log always errors. ```ts app.use(expressWinstonLogger({ winstonInstance: logger, msg: (req: APIRequest, res) => { return `HTTP ${req.url}`;...

In order to know which dimensions are supported for `setPreviewSize`, a function for getting the supported sizes would be needed. I tried `getSupportedPictureSizes`, but not all of them are supported...

dropdown: selected, disabled option not rendered when using selectedItem template

1

### Describe the bug Same as https://github.com/primefaces/primeng/issues/14716 but only when using a template to render the dropdown differently: ```html {{ item }} ``` ### Environment see below ### Reproducer https://stackblitz.com/edit/github-npixcr-zf149n?file=src%2Fapp%2Fapp.component.html...

wrong emitted height in components with ChangeDetectionStrategy.OnPush

6

If this plugin is used within components that have the OnPush change detection strategy, the initial height is incorrect. My guess is that the height of the clone (https://github.com/chrum/ngx-autosize/blob/master/projects/autosize/src/lib/autosize.directive.ts#L148) is...

multiselect: selectedOptions within selectedItemsTemplate not cleared

6

### Describe the bug When using a multiselect with `selectedItemsTemplate ` template, the internal `selectedOptions` variable is not always cleared correctly. Therefore a previous value is still rendered within the...

Number keyboard style with minus (-) and comma (,)

9

Is there any chance to show a keyboard (specifically on iOS 13) for number inputs that allow negative numbers as well as decimal numbers (like -123,4) ? I tried all...

Configure placholder identifying character

1

It would be awesome if we could configure what character acts as the identifiying char for the named attribute. So instead of using ```:``` allow the usage of e.g. ```@```...

Keep content of nodes on a single page if possible (alternative to dontBreakRows)

1

I figued out a solution for "smart" page breaks before nodes, in order to not have a single nodes content stretch across multiple pages. ```javascript pageBreakBefore: (currentNode, followingNodesOnPage, nodesOnNextPage, previousNodesOnPage)...

closes https://github.com/bluehalo/ngx-leaflet/issues/376

Multiple events are registered on map init (https://github.com/bluehalo/ngx-leaflet/blob/master/projects/ngx-leaflet/src/lib/core/leaflet.directive.ts#L182), but the listeners are never released (https://github.com/bluehalo/ngx-leaflet/blob/master/projects/ngx-leaflet/src/lib/core/leaflet.directive.ts#L165).