{"action":"created","issue":{"url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/1761","labels_url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/1761/labels{/name}","comments_url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/1761/comments","events_url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/1761/events","html_url":"https://github.com/swagger-api/swagger-ui/issues/1761","id":117559072,"number":1761,"title":"Upgrade Handlebars dependency to 4.x?","user":{"login":"brylie","id":17307,"avatar_url":"https://avatars.githubusercontent.com/u/17307?v=3","gravatar_id":"","url":"https://api.github.com/users/brylie","html_url":"https://github.com/brylie","followers_url":"https://api.github.com/users/brylie/followers","following_url":"https://api.github.com/users/brylie/following{/other_user}","gists_url":"https://api.github.com/users/brylie/gists{/gist_id}","starred_url":"https://api.github.com/users/brylie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brylie/subscriptions","organizations_url":"https://api.github.com/users/brylie/orgs","repos_url":"https://api.github.com/users/brylie/repos","events_url":"https://api.github.com/users/brylie/events{/privacy}","received_events_url":"https://api.github.com/users/brylie/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-11-18T10:34:24Z","updated_at":"2016-01-28T16:20:27Z","closed_at":"2015-12-09T20:09:54Z","body":"What are the plans to upgrade the Handlebars from 2.x to 4.x?"},"comment":{"url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/comments/176259863","html_url":"https://github.com/swagger-api/swagger-ui/issues/1761#issuecomment-176259863","issue_url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/1761","id":176259863,"user":{"login":"noirbizarre","id":15725,"avatar_url":"https://avatars.githubusercontent.com/u/15725?v=3","gravatar_id":"","url":"https://api.github.com/users/noirbizarre","html_url":"https://github.com/noirbizarre","followers_url":"https://api.github.com/users/noirbizarre/followers","following_url":"https://api.github.com/users/noirbizarre/following{/other_user}","gists_url":"https://api.github.com/users/noirbizarre/gists{/gist_id}","starred_url":"https://api.github.com/users/noirbizarre/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/noirbizarre/subscriptions","organizations_url":"https://api.github.com/users/noirbizarre/orgs","repos_url":"https://api.github.com/users/noirbizarre/repos","events_url":"https://api.github.com/users/noirbizarre/events{/privacy}","received_events_url":"https://api.github.com/users/noirbizarre/received_events","type":"User","site_admin":false},"created_at":"2016-01-28T16:20:26Z","updated_at":"2016-01-28T16:20:26Z","body":"It seems to me that ugrading to Handlebars 4.x is only a subtask of creating a Meteor Package.\r\nIt's not the same complexity, the Handlebars upgrade can be delivered alone.\r\nI depends on Handlebars 4.x but I don't intend to use the meteor package.\r\n\r\nWhy upgrade ? Templates compiled with Handlebars runtime 4.x are not compatible with previous versions.\r\nThere is some security issue with previous versions: https://nodesecurity.io/advisories/handlebars_quoteless-attributes-in-templates-can-lead-to-xss\r\n\r\nIs it possible to upgrade to Handlebars 4.x regardless of the meteor package progress ?\r\nIt will profit to other that depends on it (including the meteor package) and will allow to test both separately, and to have a cleaner merge for Handlebars 4.x."}}