Sourced from pug's releases.
pug-code-gen@3.0.3
Bug Fixes
- Validate
templateName
andglobals
are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options (#3438)pug@3.0.3
Bug Fixes
Update pug-code-gen with the following fix: (#3438)
Validate
templateName
andglobals
are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options