markup: Allow installed arbitrary Asciidoc extension via path validation.
This commit is contained in:
gzagatti
2021-01-11 16:46:31 +08:00
committed by Bjørn Erik Pedersen
parent c8f45d1d86
commit 01dd7c16af
4 changed files with 44 additions and 22 deletions

View File

@@ -100,6 +100,8 @@ Below are all the AsciiDoc related settings in Hugo with their default values:
{{< code-toggle config="markup.asciidocExt" />}}
Notice that for security concerns only extensions that do not have path separators (either `\`, `/` or `.`) are allowed. That means that extensions can only be invoked if they are in one's ruby's `$LOAD_PATH` (ie. most likely, the extension has been installed by the user). Any extension declared relative to the website's path will not be accepted.
Example of how to set extensions and attributes:
```