phoenix/hugo
1
0
Fork 0
mirror of https://github.com/gohugoio/hugo.git synced 2024-07-04 16:21:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
8191 commits 122 branches 277 tags 212 MiB
Commit graph

134 commits

Author SHA1 Message Date
Bjørn Erik Pedersen 60b176cb57
docs: Regen docshelper 2024-02-18 13:20:15 +01:00
Bjørn Erik Pedersen 7cb447ab8e
docs: Regenerate docshelper 2024-02-07 20:48:25 +01:00
Bjørn Erik Pedersen 51615440bf
docs: Make null booleans falsy in the docs helper 2024-01-31 12:34:28 +01:00
Bjørn Erik Pedersen 7caa5b3e50
docs: Regen docs helper 2024-01-31 09:45:35 +01:00
Bjørn Erik Pedersen 5fd1e74903
Merge commit '9b0050e9aabe4be65c78ccf292a348f309d50ccd' as 'docs' 
```
git subtree add --prefix=docs/ https://github.com/gohugoio/hugoDocs.git master --squash
```

Closes #11925
 2024-01-27 10:48:57 +01:00
Bjørn Erik Pedersen fc7de7136a
docs: Prepare for new sub tree 
See #11925
 2024-01-27 10:47:28 +01:00
Bjørn Erik Pedersen 50042ee1f4
docs: Regen docshelper 2024-01-26 08:23:37 +01:00
James Tatum 8915343075 deps: Update github.com/tdewolff/minify/v2 v2.20.9 => v2.20.13 
KeepConditionalComments was deprecated in the upstream library and replaced with KeepSpecialComments. This new option reflects that both conditional comments and Server Side Include comments can be optionally stripped by the minifier. As with KeepConditionalComments, the minifier is configured not to strip them by default.
 2024-01-25 19:33:14 +01:00
Bjørn Erik Pedersen 255e0a9718
docs: Regen docshelper 2023-12-05 16:19:43 +01:00
Bjørn Erik Pedersen 7617de86cd
docs: Regen docs helper 2023-12-04 15:24:34 +01:00
Bjørn Erik Pedersen d19ed4d4e6
Merge commit '35dec7c96f7ee3eb17dd444f7067f0c776fb56ae' 2023-12-04 15:24:01 +01:00
Joe Mooring bfc325f561 deps: Update github.com/tdewolff/minify/v2 v2.20.7 => v2.20.8 
Closes #5748
 2023-11-30 10:13:40 +01:00
Bjørn Erik Pedersen 29b6e133a8
docs: Regen docshelper 2023-10-30 15:03:10 +01:00
Bjørn Erik Pedersen d3d4ab41a9
docs: Regenerate docshelper 2023-10-29 11:31:51 +01:00
Bjørn Erik Pedersen 1768684d8b
docs: Regen docshelper 2023-09-24 11:56:43 +02:00
Bjørn Erik Pedersen e847a98db6
docs: Regen docs helper 2023-08-30 19:23:34 +02:00
OMOTO Tsukasa d7dcc76d27
markup/goldmark: Add CJK extension 
Fixes #10472
 2023-08-30 13:08:45 +02:00
Joe Mooring 90944aa261 docshelper: Improve template lookup order descriptions 
- Always include example for "with layout/type set"
- Use lowercase for "set to" examples (lookup is case sensitive)
- Consistent use of taxonomy and term

Fixes gohugoio/hugoDocs#1734
 2023-08-15 12:53:18 +02:00
Bjørn Erik Pedersen a2f6400d65
cache: Hide IsResourceDir from the exported config 2023-08-09 23:49:08 +02:00
Bjørn Erik Pedersen d139f30234 docs: Replace docs.json with docs.yaml 
Updates #11345
 2023-08-08 09:13:17 +02:00
Bjørn Erik Pedersen 851bf3515e Add all config to docshelper.json 
Also consolidate so the mediaTypes and outputFormats are listed once only.

Fixes #11328
 2023-08-07 13:42:54 +02:00
Joe Mooring c934a45069 docs: Refresh docs.json 2023-07-08 23:20:11 +02:00
Bjørn Erik Pedersen c27639b9a0
docs: Regen docs helper 2023-07-03 19:25:27 +02:00
Bjørn Erik Pedersen 9f98b3e718
docs: Regen docshelper 2023-06-19 17:52:52 +02:00
Bjørn Erik Pedersen b6e6438f7f docs: Regen docshelper 2023-05-22 18:54:34 +02:00
Bjørn Erik Pedersen a56b9071db
cods: Regen docs helper 2023-03-01 16:35:23 +01:00
Bjørn Erik Pedersen 80e8bd3b72
docs: Regen docshelper 2023-01-17 12:52:08 +01:00
Bjørn Erik Pedersen 10bb29d7f3
docs: Regen docs helper JSON 2022-12-23 10:15:48 +01:00
Bjørn Erik Pedersen de9c5542ca
docs: Add basic doc for wrapStandAloneImageWithinParagraph etc. 
See #10492
 2022-12-05 16:50:47 +01:00
Bjørn Erik Pedersen 75f782a5a7
docs: Regen docs helper 2022-11-24 15:17:22 +01:00
Bjørn Erik Pedersen 9f7fb0a73b
docs: Regenerate docs helper 2022-11-17 16:16:53 +01:00
Bjørn Erik Pedersen f04cc581e1
Merge commit '00c4484c7092181729f6f470805bc7d72e8ad17b' 2022-11-17 16:16:19 +01:00
Bjørn Erik Pedersen 8377c3cea1
docs: Regen docs helper 2022-09-22 18:55:00 +02:00
Mathieu Parent 86653fa38e
config/security: Allow proxy variables in subcommands 
In particular for go get
 2022-09-19 12:37:35 +02:00
Bjørn Erik Pedersen 0cb459a20a
docs: Regen docshelper 2022-06-16 07:23:38 +02:00
Bjørn Erik Pedersen db9d274275
docs: Regen docs helper 2022-05-31 10:23:20 +02:00
Bjørn Erik Pedersen a4fff5753f
docs: Regen docs helper 2022-04-28 11:53:03 +02:00
Joe Mooring 3117e58595 deps: Update github.com/tdewolff/minify/v2 v2.10.0 => v2.11.0 
Fixes #9713
Fixes #9740

Adds support for minify.tdewolff.svg.keepComments (bool)
 2022-04-08 21:44:29 +02:00
Bjørn Erik Pedersen db1562e134
docs: Regen docshelper 2022-03-26 11:06:04 +02:00
Bjørn Erik Pedersen a4ac188c19
docs: Regenerate docshelper 2022-03-10 10:08:04 +01:00
Bjørn Erik Pedersen cdb8b0842b
docs: Regenerate docshelper 2022-03-09 11:33:53 +01:00
Bjørn Erik Pedersen 1f8cd2614d
docs: Regenerate docshelper 2022-03-08 19:40:07 +01:00
Bjørn Erik Pedersen 12d00d288c
docs: Regenerate docs helper 2022-02-28 08:59:57 +01:00
Bjørn Erik Pedersen ea54a99ca5 deps: Update github.com/alecthomas/chroma v0.9.4 => v0.10.0 2022-02-15 10:37:14 +01:00
Bjørn Erik Pedersen f2bc13dd9e
docs: Regenerate docshelper 2022-01-12 08:17:03 +01:00
Bjørn Erik Pedersen 4a0b55330c
docs: Regenerate docshelper 2022-01-04 17:11:17 +01:00
Bjørn Erik Pedersen 623dda7174 Revert "config/security: Add HOME to default exec env var whitelist" 
There have been one report in the wild suggesting that this needs to be tested better before doing:

https://discourse.gohugo.io/t/hugo-mod-failing-in-v0-91-1-but-works-in-v0-91-0/36180/5

This reverts commit fca266ebbb.
 2021-12-23 16:23:15 +01:00
Bjørn Erik Pedersen fca266ebbb config/security: Add HOME to default exec env var whitelist 
See #9309
 2021-12-22 11:33:59 +01:00
Bjørn Erik Pedersen 6df2f080c9
docs: Regen docs helper 2021-12-17 10:31:08 +01:00
Bjørn Erik Pedersen f4389e48ce
Add some basic security policies with sensible defaults 
This ommmit contains some security hardening measures for the Hugo build runtime.

There are some rarely used features in Hugo that would be good to have disabled by default. One example would be the "external helpers".

For `asciidoctor` and some others we use Go's `os/exec` package to start a new process.

These are a predefined set of binary names, all loaded from `PATH` and with a predefined set of arguments. Still, if you don't use `asciidoctor` in your project, you might as well have it turned off.

You can configure your own in the new `security` configuration section, but the defaults are configured to create a minimal amount of site breakage. And if that do happen, you will get clear instructions in the loa about what to do.

The default configuration is listed below. Note that almost all of these options are regular expression _whitelists_ (a string or a slice); the value `none` will block all.

```toml
[security]
  enableInlineShortcodes = false
  [security.exec]
    allow = ['^dart-sass-embedded$', '^go$', '^npx$', '^postcss$']
    osEnv = ['(?i)^(PATH|PATHEXT|APPDATA|TMP|TEMP|TERM)$']

  [security.funcs]
    getenv = ['^HUGO_']

  [security.http]
    methods = ['(?i)GET|POST']
    urls = ['.*']
```
 2021-12-16 09:40:22 +01:00