config/security: Add CI env var to whitelist

diff --git a/config/security/securityConfig.go b/config/security/securityConfig.go
index b5a17ac2d1877801f7b762f3f8d74753aa91dcba..979c40125c3f784caebace7d7707fd3d0d4daa38 100644 (file)
--- a/config/security/securityConfig.go
+++ b/config/security/securityConfig.go
@@ -45,7 +45,7 @@ var DefaultConfig = Config{
                OsEnv: NewWhitelist("(?i)^((HTTPS?|NO)_PROXY|PATH(EXT)?|APPDATA|TE?MP|TERM)$"),
        },
        Funcs: Funcs{
-               Getenv: NewWhitelist("^HUGO_"),
+               Getenv: NewWhitelist("^HUGO_", "^CI$"),
        },
        HTTP: HTTP{
                URLs:    NewWhitelist(".*"),

diff --git a/config/security/securityConfig_test.go b/config/security/securityConfig_test.go
index c8753f7fc7facaae71e40cf8613dc4d72ffa34f6..c34af9efa342468cfb8d18c8c7a88d4c7b5a6ee7 100644 (file)
--- a/config/security/securityConfig_test.go
+++ b/config/security/securityConfig_test.go
@@ -140,7 +140,7 @@ func TestToTOML(t *testing.T) {
        got := DefaultConfig.ToTOML()
 
        c.Assert(got, qt.Equals,
-               "[security]\n  enableInlineShortcodes = false\n\n  [security.exec]\n    allow = ['^dart-sass-embedded$', '^go$', '^npx$', '^postcss$']\n    osEnv = ['(?i)^((HTTPS?|NO)_PROXY|PATH(EXT)?|APPDATA|TE?MP|TERM)$']\n\n  [security.funcs]\n    getenv = ['^HUGO_']\n\n  [security.http]\n    methods = ['(?i)GET|POST']\n    urls = ['.*']",
+               "[security]\n  enableInlineShortcodes = false\n\n  [security.exec]\n    allow = ['^dart-sass-embedded$', '^go$', '^npx$', '^postcss$']\n    osEnv = ['(?i)^((HTTPS?|NO)_PROXY|PATH(EXT)?|APPDATA|TE?MP|TERM)$']\n\n  [security.funcs]\n    getenv = ['^HUGO_', '^CI$']\n\n  [security.http]\n    methods = ['(?i)GET|POST']\n    urls = ['.*']",
        )
 }