chore(deps): [security] bump handlebars from 1.0.12 to 4.4.5 in /tests/apps/.websocket.disabled

[dependabot-preview]

Bumps handlebars from 1.0.12 to 4.4.5. This update includes a security fix.

Vulnerabilities fixed

Sourced from The Node Security Working Group.

Quoteless Attributes in Templates can lead to Content Injection
Not using quotes around your attributes in handlebar templates, could lead to content injection.

Example

Template:
<a href={{foo}}/>

Input:
{ 'foo' : 'test.com onload=alert(1)'}

Rendered result:
<a href=test.com onload=alert(1)/>

Affected versions: <4.0.0

Changelog

Sourced from handlebars's changelog.

v4.4.5 - October 20th, 2019

Bugfixes:

• Contents of raw-blocks must be matched with non-eager regex-matching - 8d5530e, #1579

Commits

v4.4.4 - October 20th, 2019

Bugfixes:

• fix: prevent zero length tokens in raw-blocks (#1577, #1578) - f1752fe

Chore:

• chore: link to s3 bucket with https, add "npm ci" to build instructions - 0b593bf

Compatibility notes:

• no compatibility issues are expected

Commits

v4.4.3 - October 8th, 2019

Bugfixes

Typings:

• add missing type fields to AST typings and add tests for them - 0440af2

Commits

v4.4.2 - October 2nd, 2019

• chore: fix grunt-saucelabs dependency - b7eada0

Commits

v4.4.1 - October 2nd, 2019

• #1562 - Error message for syntax error missing location in 4.2.1+

Commits

v4.4.0 - September 29th, 2019

• Added support for iterable objects in {{#each}} helper (#1557) - cf7545e

Commits

... (truncated)

Commits

• 8e1cce7 v4.4.5
• def79fd Update release notes
• 8d5530e fix: non-eager matching raw-block-contents
• 2ab261e v4.4.4
• 143ac80 Update release notes
• f1752fe fix: prevent zero length tokens in raw-blocks (#1577)
• 0b593bf chore: link to s3 bucket with https, add "npm ci" to build instructions
• 2e53fba v4.4.3
• ba570c4 Update release notes
• 0440af2 added missing type fields in typings and tests for them
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by knappi, a new releaser for handlebars since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)