hugo - Mirror of https://github.com/gohugoio/hugo

Age	Commit message (Collapse)	Author
2022-01-12	Merge commit 'a8e9fc699a6ff7d578f97a7c553ce844efad8fdb'	Bjørn Erik Pedersen

2021-12-16	Add some basic security policies with sensible defaults	Bjørn Erik Pedersen
	This ommmit contains some security hardening measures for the Hugo build runtime. There are some rarely used features in Hugo that would be good to have disabled by default. One example would be the "external helpers". For `asciidoctor` and some others we use Go's `os/exec` package to start a new process. These are a predefined set of binary names, all loaded from `PATH` and with a predefined set of arguments. Still, if you don't use `asciidoctor` in your project, you might as well have it turned off. You can configure your own in the new `security` configuration section, but the defaults are configured to create a minimal amount of site breakage. And if that do happen, you will get clear instructions in the loa about what to do. The default configuration is listed below. Note that almost all of these options are regular expression _whitelists_ (a string or a slice); the value `none` will block all. ```toml [security] enableInlineShortcodes = false [security.exec] allow = ['^dart-sass-embedded$', '^go$', '^npx$', '^postcss$'] osEnv = ['(?i)^(PATH\|PATHEXT\|APPDATA\|TMP\|TEMP\|TERM)$'] [security.funcs] getenv = ['^HUGO_'] [security.http] methods = ['(?i)GET\|POST'] urls = ['.*'] ```
2021-12-13	Merge commit '45e6fdb315d113ba13e20a633ed0c67e3f25170d'	Bjørn Erik Pedersen

2021-08-03	docs: Adjust config docs	Bjørn Erik Pedersen

2021-02-23	Merge commit '9d31f650da964a52f05fc27b7fb99cf3e09778cf'	Bjørn Erik Pedersen

2020-05-31	Merge commit '9e1dcefc5f559944b70d2fa520f6acd5c56a69f2'	Bjørn Erik Pedersen

2020-02-06	Merge commit '3c0036805d64fdd8290f1c4a31371780ff3ea365'	Bjørn Erik Pedersen

2019-11-23	Add Goldmark as the new default markdown handler	Bjørn Erik Pedersen
	This commit adds the fast and CommonMark compliant Goldmark as the new default markdown handler in Hugo. If you want to continue using BlackFriday as the default for md/markdown extensions, you can use this configuration: ```toml [markup] defaultMarkdownHandler="blackfriday" ``` Fixes #5963 Fixes #1778 Fixes #6355
2019-10-21	Merge commit 'b9bd35d72e14932fb6588ff62b90cddef0a060fc' as 'docs'	Bjørn Erik Pedersen

2019-10-21	docs: Replace /docs	Bjørn Erik Pedersen

2019-07-25	docs: Add Hugo Modules docs	Bjørn Erik Pedersen

2019-03-26	Merge commit 'c2037f0c9a3a35b9db9c404f6b5f94ec8b690a53'	Bjørn Erik Pedersen

2018-12-26	Merge commit '978856e2ad12d2bcaf37bb9e31f806b30a4c42f4'	Bjørn Erik Pedersen

2017-06-26	Remove the docs submodule	Bjørn Erik Pedersen
	Will be replaced by a Git subtree. See #3647
2017-06-21	docs: Update	Bjørn Erik Pedersen

2017-06-21	Update docs	Bjørn Erik Pedersen

2017-06-21	Update docs	Bjørn Erik Pedersen

2017-06-21	releaser: Prepare repository for 0.25-DEV	Bjørn Erik Pedersen
	[ci skip]
2017-06-21	releaser: Update /docs to 0.24 [ci skip]v0.24	Bjørn Erik Pedersen

2017-06-21	releaser: Bump versions for release of 0.24	Bjørn Erik Pedersen
	[ci skip]
2017-06-21	releaser: Update /docs [ci skip]	Bjørn Erik Pedersen

2017-06-16	releaser: Prepare repository for 0.24-DEV	Bjørn Erik Pedersen
	[ci skip]
2017-06-16	releaser: Update /docs to 0.23 [ci skip]v0.23	Bjørn Erik Pedersen

2017-06-16	releaser: Bump versions for release of 0.23	Bjørn Erik Pedersen
	[ci skip]
2017-06-16	releaser: Update /docs [ci skip]	Bjørn Erik Pedersen

2017-06-14	Add docs as submodule	Bjørn Erik Pedersen