From e5f229974166402f51e4ee0695ffb4d1e09fa174 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Erik=20Pedersen?= Date: Thu, 25 Jul 2019 00:12:40 +0200 Subject: Block symlink dir traversal for /static This is in line with how it behaved before, but it was lifted a little for the project mount for Hugo Modules, but that could create hard-to-detect loops. --- tpl/data/resources_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'tpl/data') diff --git a/tpl/data/resources_test.go b/tpl/data/resources_test.go index 39cf6bfa9..e9850c226 100644 --- a/tpl/data/resources_test.go +++ b/tpl/data/resources_test.go @@ -203,7 +203,7 @@ func newDeps(cfg config.Provider) *deps.Deps { fs := hugofs.NewMem(cfg) logger := loggers.NewErrorLogger() - p, err := helpers.NewPathSpec(fs, cfg) + p, err := helpers.NewPathSpec(fs, cfg, nil) if err != nil { panic(err) } -- cgit v1.2.3