Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Update version numbers | René Kijewski | 2022-03-23 | 1 | -1/+1 |
| | |||||
* | Move handling of integrations into askama_shared | René Kijewski | 2022-03-23 | 1 | -0/+8 |
| | | | | | | | Before this PR the handling of integrations was done both by askama_shared and askama_derive. This diff lets askama_shared do the work. This will prevent problems like #629, when both packages might come out of sync. | ||||
* | Actix Web v4.0 is here | René Kijewski | 2022-02-25 | 1 | -1/+1 |
| | |||||
* | Increment patch versions of askama_{shared,escape} | René Kijewski | 2022-02-16 | 1 | -1/+1 |
| | |||||
* | Make json filter safe | René Kijewski | 2022-02-16 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | Previously the built-in json filter had an issue that made it unsafe to use in HTML data. When used in HTML attributes an attacker who is able to supply an arbitrary string that should be JSON encoded could close the containing HTML element e.g. with `"</div>"`, and write arbitrary HTML code afterwards as long as they use apostrophes instead of quotation marks. The programmer could make this use case safe by explicitly escaping the JSON result: `{{data|json|escape}}`. In a `<script>` context the json filter was not usable at all, because in scripts HTML escaped entities are not parsed outside of XHTML documents. Without using the safe filter an attacker could close the current script using `"</script>"`. This PR fixes the problem by always escaping less-than, greater-than, ampersand, and apostrophe characters using their JSON unicode escape sequence `\u00xx`. Unless the programmer explicitly uses the safe filter, quotation marks are HTML encoded as `"`. In scripts the programmer should use the safe filter, otherwise not. | ||||
* | Add markdown filter | René Kijewski | 2022-02-07 | 1 | -0/+2 |
| | |||||
* | Remove used optional dependency | René Kijewski | 2022-01-31 | 1 | -1/+0 |
| | |||||
* | Move extension_to_mime_type() to askama_shared | René Kijewski | 2022-01-07 | 1 | -0/+2 |
| | |||||
* | Bump version number for askama_shared | Dirkjan Ochtman | 2022-01-04 | 1 | -1/+1 |
| | |||||
* | Bump version numbers | Dirkjan Ochtman | 2021-11-24 | 1 | -2/+2 |
| | |||||
* | Remove authors from Cargo metadata (see RFC 3052) | Dirkjan Ochtman | 2021-11-24 | 1 | -1/+0 |
| | |||||
* | Upgrade to nom 7 | Dirkjan Ochtman | 2021-08-21 | 1 | -1/+1 |
| | |||||
* | Bump version numbers in anticipation of beta release | Dirkjan Ochtman | 2021-08-21 | 1 | -1/+1 |
| | |||||
* | Upgrade nom to 6.2.1 (bitvec & funty issue) | Lee Hambley | 2021-08-02 | 1 | -2/+1 |
| | |||||
* | Rename askama_actix trait method as suggested by clippy | Dirkjan Ochtman | 2021-02-15 | 1 | -1/+1 |
| | | | | | By bumping the dependency versions for askama and askama_shared, this should be safe. | ||||
* | Fix bitvec broken dependency temporarily | Edgar | 2021-02-15 | 1 | -0/+1 |
| | |||||
* | Merge pull request #400 from djc/local | Dirkjan Ochtman | 2020-12-15 | 1 | -1/+1 |
|\ | | | | | Sync local repo with GitHub | ||||
| * | Bump version for askama_shared | Dirkjan Ochtman | 2020-11-19 | 1 | -1/+1 |
| | | |||||
| * | Bump versions to fix semver problem | Dirkjan Ochtman | 2020-11-17 | 1 | -1/+1 |
| | | |||||
* | | Disable nom default features | Konrad Borowski | 2020-11-21 | 1 | -3/+1 |
|/ | | | | | This removes unnecessary lexical feature reducing amount of crates Askama depends on. | ||||
* | Bump version for askama_shared | Dirkjan Ochtman | 2020-11-16 | 1 | -1/+1 |
| | |||||
* | Upgrade to nom 6 | Dirkjan Ochtman | 2020-11-02 | 1 | -1/+1 |
| | |||||
* | Bump version numbers | Dirkjan Ochtman | 2020-07-28 | 1 | -1/+1 |
| | |||||
* | Bump versions to prepare for askama_tide release | Dirkjan Ochtman | 2020-07-14 | 1 | -1/+1 |
| | |||||
* | Bump askama_shared version with whitespace fixes | Dirkjan Ochtman | 2020-06-30 | 1 | -1/+1 |
| | |||||
* | Bump version number for askama_shared | Dirkjan Ochtman | 2020-06-30 | 1 | -1/+1 |
| | |||||
* | Reference READMEs in crate metadata | Dirkjan Ochtman | 2020-06-30 | 1 | -0/+1 |
| | |||||
* | Bump version numbers | Dirkjan Ochtman | 2020-06-30 | 1 | -2/+2 |
| | |||||
* | add urlencode filter | João Oliveira | 2020-03-30 | 1 | -2/+3 |
| | |||||
* | Move code generation into askama_shared | Dirkjan Ochtman | 2020-01-29 | 1 | -0/+1 |
| | |||||
* | Move input module into askama_shared | Dirkjan Ochtman | 2020-01-29 | 1 | -0/+2 |
| | |||||
* | Move parser into askama_shared | Dirkjan Ochtman | 2020-01-29 | 1 | -0/+3 |
| | |||||
* | Bump version to 0.9.1 | Dirkjan Ochtman | 2020-01-27 | 1 | -1/+1 |
| | |||||
* | Show all filters in docs.rs | Dirkjan Ochtman | 2020-01-27 | 1 | -0/+3 |
| | |||||
* | Bump version numbers to 0.9.0 | Dirkjan Ochtman | 2020-01-15 | 1 | -2/+2 |
| | |||||
* | Make dependencies optional where possible | Dirkjan Ochtman | 2020-01-15 | 1 | -4/+11 |
| | |||||
* | Modernize and simplify imports | Dirkjan Ochtman | 2020-01-15 | 1 | -2/+1 |
| | |||||
* | Update toml requirement from 0.4 to 0.5 | dependabot[bot] | 2019-03-18 | 1 | -1/+1 |
| | | | | | | | Updates the requirements on [toml](https://github.com/alexcrichton/toml-rs) to permit the latest version. - [Release notes](https://github.com/alexcrichton/toml-rs/releases) - [Commits](https://github.com/alexcrichton/toml-rs/compare/0.4.0...0.5.0) Signed-off-by: dependabot[bot] <support@dependabot.com> | ||||
* | Add optional support for yaml filter (see #192) | Dirkjan Ochtman | 2019-01-17 | 1 | -0/+1 |
| | |||||
* | Bump versions in anticipation of 0.8.0 release | Dirkjan Ochtman | 2019-01-17 | 1 | -2/+2 |
| | |||||
* | Upgrade to 2018 edition | Dirkjan Ochtman | 2018-12-08 | 1 | -0/+1 |
| | |||||
* | Add filesizeformat filter | youmouse | 2018-11-16 | 1 | -0/+1 |
| | |||||
* | Clean up unused features | Dirkjan Ochtman | 2018-11-07 | 1 | -7/+0 |
| | |||||
* | Create askama_escape crate | bott | 2018-11-07 | 1 | -0/+1 |
| | |||||
* | Bump version to 0.7.2 | Dirkjan Ochtman | 2018-10-08 | 1 | -1/+1 |
| | |||||
* | Add absolute value filter | bott | 2018-09-22 | 1 | -0/+1 |
| | |||||
* | Bump versions to 0.7.1 | Dirkjan Ochtman | 2018-07-23 | 1 | -1/+1 |
| | |||||
* | Add optional implementation for actix_web's Responder trait | Ryan McGrath | 2018-07-22 | 1 | -0/+1 |
| | |||||
* | Add partial support for multiple template dirs | mash | 2018-07-10 | 1 | -2/+4 |
| | |||||
* | Bump version numbers to 0.7.0 | Dirkjan Ochtman | 2018-06-22 | 1 | -1/+1 |
| |