mirror of
https://github.com/gohugoio/hugo.git
synced 2026-08-24 07:18:54 +00:00
Bjørn Erik Pedersen
f228c87d41
Lstat only refrains from following the last element of a path, so a symlink in an intermediate directory was still resolved, and reads could escape the mount via e.g. resources.Get "symlinkdir/secret.txt". Walk the directories up to the mount root and reject any that is a symlink. Follow-up tocf9c8f93candf8b5fa09a.
9 lines
82 B
Plaintext
9 lines
82 B
Plaintext
|
|
*.test
|
|
imports.*
|
|
dist/
|
|
public/
|
|
.DS_Store
|
|
cache/filecache/_gen/
|
|
.claude/
|
|
dump.txt |