From e5f229974166402f51e4ee0695ffb4d1e09fa174 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Erik=20Pedersen?= Date: Thu, 25 Jul 2019 00:12:40 +0200 Subject: Block symlink dir traversal for /static This is in line with how it behaved before, but it was lifted a little for the project mount for Hugo Modules, but that could create hard-to-detect loops. --- cache/filecache/filecache_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'cache') diff --git a/cache/filecache/filecache_test.go b/cache/filecache/filecache_test.go index a03c3116a..78becd43b 100644 --- a/cache/filecache/filecache_test.go +++ b/cache/filecache/filecache_test.go @@ -292,7 +292,7 @@ func newPathsSpec(t *testing.T, fs afero.Fs, configStr string) *helpers.PathSpec cfg, err := config.FromConfigString(configStr, "toml") assert.NoError(err) initConfig(fs, cfg) - p, err := helpers.NewPathSpec(hugofs.NewFrom(fs, cfg), cfg) + p, err := helpers.NewPathSpec(hugofs.NewFrom(fs, cfg), cfg, nil) assert.NoError(err) return p -- cgit v1.2.3