Skip to content

Make sure that site_path cannot begin with a slash #43

@spanezz

Description

@spanezz

A metadata defining an absolute path in site_path, can cause the rendered file to be written to arbitrary locations in the file system, due to the behaviour of os.path.join with absolute paths.

Make sure we test that leading slashes are stripped from site_path when processing pages, so that the generated build_path entries are all relative path.

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity related issue

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions