Search results

[Security] Code Injection via Unescaped Custom Delimiters in Compiler (CWE-94)

Status: Open.

#284 In twitter/hogan.js;

· ByamB4 opened on Mar 11, 2026

Mkdirp is no longer supported

Status: Open.

#283 In twitter/hogan.js;

· oliveirat3-ppb opened on Aug 7, 2024

What are some modern alternatives?

Status: Open.

#281 In twitter/hogan.js;

· adamlucia opened on Feb 25, 2024

Update hogan.js to track the latest Mustache spec, close remaining bugs, and make it clear the project is in maintenance mode

Status: Open.

#272 In twitter/hogan.js;

· sayrer opened on May 1, 2021

When using bower to install hogan, the node.js file is loaded

Status: Open.

#253 In twitter/hogan.js;

· grnadav opened on Nov 20, 2016

Documentation on hogan.js homepage assumes Array.prototoype.map mutates original array

Status: Open.

#251 In twitter/hogan.js;

· g-patel opened on Aug 29, 2016

inheritance doesn't work

Status: Open.

#244 In twitter/hogan.js;

· kflu opened on Apr 12, 2016

cache singleton causes memory leak

Status: Open.

#239 In twitter/hogan.js;

· dmiddlecamp opened on Jan 13, 2016

Checking exports !== undefined can give false positives

Status: Open.

#238 In twitter/hogan.js;

· fofr opened on Dec 24, 2015

Extraneous semicolon on inverted sections

Status: Open.

#236 In twitter/hogan.js;

· werkt opened on Dec 14, 2015

render is undefined

Status: Open.

#222 In twitter/hogan.js;

· rouberg opened on May 20, 2015

Lambda return values are only compiled with immediate context

Status: Open.

#219 In twitter/hogan.js;

· dpatti opened on Apr 9, 2015