diff options
| author | Bjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com> | 2021-12-23 12:46:04 +0100 |
|---|---|---|
| committer | Bjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com> | 2021-12-23 16:23:15 +0100 |
| commit | 623dda71747c58dd052dbde3a0dbed1fb75b0c41 (patch) | |
| tree | 3449eb3386f533438b6155b7cba6bcebef90fe6b /config/security/securityConfig.go | |
| parent | aee9e11a400ac231eb9e91c005f1fe039b106396 (diff) | |
Revert "config/security: Add HOME to default exec env var whitelist"
There have been one report in the wild suggesting that this needs to be tested better before doing:
https://discourse.gohugo.io/t/hugo-mod-failing-in-v0-91-1-but-works-in-v0-91-0/36180/5
This reverts commit fca266ebbb81af3d4479873a7a79759033c7ce25.
Diffstat (limited to 'config/security/securityConfig.go')
| -rw-r--r-- | config/security/securityConfig.go | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/config/security/securityConfig.go b/config/security/securityConfig.go index 8b0a52698..09c5cb625 100644 --- a/config/security/securityConfig.go +++ b/config/security/securityConfig.go @@ -42,7 +42,7 @@ var DefaultConfig = Config{ ), // These have been tested to work with Hugo's external programs // on Windows, Linux and MacOS. - OsEnv: NewWhitelist("(?i)^(PATH|PATHEXT|APPDATA|HOME|TMP|TEMP|TERM)$"), + OsEnv: NewWhitelist("(?i)^(PATH|PATHEXT|APPDATA|TMP|TEMP|TERM)$"), }, Funcs: Funcs{ Getenv: NewWhitelist("^HUGO_"), @@ -110,6 +110,7 @@ func (c Config) CheckAllowedExec(name string) error { } } return nil + } func (c Config) CheckAllowedGetEnv(name string) error { @@ -158,6 +159,7 @@ func (c Config) ToSecurityMap() map[string]interface{} { "security": m, } return sec + } // DecodeConfig creates a privacy Config from a given Hugo configuration. @@ -187,6 +189,7 @@ func DecodeConfig(cfg config.Provider) (Config, error) { } return sc, nil + } func stringSliceToWhitelistHook() mapstructure.DecodeHookFuncType { @@ -202,6 +205,7 @@ func stringSliceToWhitelistHook() mapstructure.DecodeHookFuncType { wl := types.ToStringSlicePreserveString(data) return NewWhitelist(wl...), nil + } } |