diff options
| author | Bjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com> | 2021-12-22 10:55:44 +0100 |
|---|---|---|
| committer | Bjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com> | 2021-12-22 11:33:59 +0100 |
| commit | fca266ebbb81af3d4479873a7a79759033c7ce25 (patch) | |
| tree | 8a7a9542a1bc9d2ae0e80c5a5f10004211adfbbc /config/security/securityConfig.go | |
| parent | 0016e21cd6b3cc267a9b0d99adb9ba13bde48e4c (diff) | |
config/security: Add HOME to default exec env var whitelist
See #9309
Diffstat (limited to 'config/security/securityConfig.go')
| -rw-r--r-- | config/security/securityConfig.go | 6 |
1 files changed, 1 insertions, 5 deletions
diff --git a/config/security/securityConfig.go b/config/security/securityConfig.go index 09c5cb625..8b0a52698 100644 --- a/config/security/securityConfig.go +++ b/config/security/securityConfig.go @@ -42,7 +42,7 @@ var DefaultConfig = Config{ ), // These have been tested to work with Hugo's external programs // on Windows, Linux and MacOS. - OsEnv: NewWhitelist("(?i)^(PATH|PATHEXT|APPDATA|TMP|TEMP|TERM)$"), + OsEnv: NewWhitelist("(?i)^(PATH|PATHEXT|APPDATA|HOME|TMP|TEMP|TERM)$"), }, Funcs: Funcs{ Getenv: NewWhitelist("^HUGO_"), @@ -110,7 +110,6 @@ func (c Config) CheckAllowedExec(name string) error { } } return nil - } func (c Config) CheckAllowedGetEnv(name string) error { @@ -159,7 +158,6 @@ func (c Config) ToSecurityMap() map[string]interface{} { "security": m, } return sec - } // DecodeConfig creates a privacy Config from a given Hugo configuration. @@ -189,7 +187,6 @@ func DecodeConfig(cfg config.Provider) (Config, error) { } return sc, nil - } func stringSliceToWhitelistHook() mapstructure.DecodeHookFuncType { @@ -205,7 +202,6 @@ func stringSliceToWhitelistHook() mapstructure.DecodeHookFuncType { wl := types.ToStringSlicePreserveString(data) return NewWhitelist(wl...), nil - } } |