hugo/hugolib
Anthony Fok e71bef79e5 Validate aliases to prevent directory traversal etc.
Add validation before creating aliases:

 * Prevent creating aliases outside webroot (public/ dir)
 * Skip empty "" alias
 * Skip "/" → "/index.html", which gets overwritten anyway
 * Refuse to create Windows-invalid filenames on Windows;
   warn on other platforms
 * In case of invalid aliases, after skipping them,
   return `err = nil` to prevent the error passing up
   all the way to `hugolib.Render()` and causing Hugo to abort.
 * Update alias tests.

Fixes #701: Add support for alias with whitespace
Fixes #1418: Add validation for alias
2015-09-13 18:08:42 +02:00
..
author.go
benchmark_test.go
datafiles_test.go
handler_base.go
handler_file.go
handler_meta.go
handler_page.go
handler_test.go
hugo.go
media.go
menu.go
menu_test.go
node.go
page.go
page_permalink_test.go
page_taxonomy_test.go
page_test.go
page_time_integration_test.go
pageCache.go
pageCache_test.go
pageGroup.go
pageGroup_test.go
pageSort.go
pageSort_test.go
pagesPrevNext.go
pagesPrevNext_test.go
pagination.go
pagination_test.go
path_separators_test.go
path_separators_windows_test.go
permalinks.go
permalinks_test.go
planner.go
redis.cn.md
rss_test.go
scratch.go
scratch_test.go
shortcode.go
shortcode_test.go
shortcodeparser.go
shortcodeparser_test.go
site.go Validate aliases to prevent directory traversal etc. 2015-09-13 18:08:42 +02:00
site_show_plan_test.go
site_test.go Complete the Url-to-URL transition in tests 2015-09-13 05:21:24 -06:00
site_url_test.go
siteinfo_test.go
siteJSONEncode_test.go
sitemap.go
sitemap_test.go
summary.go
taxonomy.go
taxonomy_test.go