Skip to content

Make sure that site_path cannot begin with a slash #43

Description

@spanezz

A metadata defining an absolute path in site_path, can cause the rendered file to be written to arbitrary locations in the file system, due to the behaviour of os.path.join with absolute paths.

Make sure we test that leading slashes are stripped from site_path when processing pages, so that the generated build_path entries are all relative path.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity related issue

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions