Conversation

rtfpessoa

No description provided.

@rtfpessoartfpessoa marked this pull request as ready for review September 14, 2022 13:04
@rtfpessoartfpessoa force-pushed the use-wontache branch 2 times, most recently from 23c6913 to 0319458 Compare September 14, 2022 13:12
@Lordfirespeed

Any updates on this PR?
I'm put off using diff2html since hogan.js is so outdated.
Happy to contribute if that would be helpful!

@rtfpessoa

Any updates on this PR?

Not yet.

I'm put off using diff2html since hogan.js is so outdated.

Not sure I understand what is the problem. hogan.js is very stable and no bugs or problems were found.
We don't have any special lock on it, we are using mustache and hogan is just the best way I found at the time to render it.

Happy to contribute if that would be helpful!

wontache was pretty early at the time I started this. With the new changes it would require some bigger rewrite and I did not have time. If you want to contribute the migration go ahead and feel free to send a PR.

But TBH wontache has no releases since last October and has no version 1.x. I am ok in releasing some parallel versions but since it is not even stable and has no active development I do not feel comfortable in putting it in master.

@geevade

We were also looking forward to using diff2html, but then realized, that hogan uses some sort of eval. This conflicts with our csp -> 'call to Function() blocked by CSP' makeTemplate...

Hogan has an unfixed ticket from 10 years ago: twitter/hogan.js#135
their 'solution' didn't work:

'EvalError: Refused to evaluate a string as Javascript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self'"
at new Function()
at Hogan.makeTemplate

Sign up for free to join this conversation on . Already have an account? Sign in to comment
None yet
None yet

Successfully merging this pull request may close these issues.