handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block · Teire