Block symlink dir traversal for /static
authorBjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com>
Wed, 24 Jul 2019 22:12:40 +0000 (00:12 +0200)
committerBjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com>
Thu, 25 Jul 2019 09:27:25 +0000 (11:27 +0200)
commite5f229974166402f51e4ee0695ffb4d1e09fa174
tree44dc7adc4fd02cb563583afaff6ddaa781821e2f
parent87a07282a2f01779e098cde0aaee1bae34dc32e6
Block symlink dir traversal for /static

This is in line with how it behaved before, but it was lifted a little for the project mount for Hugo Modules,
but that could create hard-to-detect loops.
24 files changed:
cache/filecache/filecache_test.go
deps/deps.go
helpers/path_test.go
helpers/pathspec.go
helpers/pathspec_test.go
helpers/testhelpers_test.go
helpers/url_test.go
hugofs/decorators.go
hugofs/fileinfo.go
hugofs/nosymlink_fs.go
hugofs/nosymlink_test.go
hugofs/rootmapping_fs.go
hugofs/walk.go
hugolib/data/hugo.toml [deleted file]
hugolib/filesystems/basefs.go
hugolib/filesystems/basefs_test.go
hugolib/hugo_modules_test.go
hugolib/hugo_sites_build_test.go
hugolib/pages_capture_test.go
resources/page/testhelpers_test.go
resources/testhelpers_test.go
source/content_directory_test.go
source/filesystem_test.go
tpl/data/resources_test.go