Commit Graph
10048 Commits
Author SHA1 Message Date
Bjørn Erik Pedersen 915f858dce Fix release notes version 2021-12-23 18:06:24 +01:00
Bjørn Erik Pedersen 58093dafec Update index.md 2021-12-23 18:03:30 +01:00
Bjørn Erik Pedersen 8008ba1e1f Release 0.91.2 2021-12-23 17:59:17 +01:00
Bjørn Erik Pedersen d1788dae83 Merge branch 'tempv0.91.2' 2021-12-23 17:42:29 +01:00
Bjørn Erik Pedersen af2970180d Revert "config/security: Add HOME to default exec env var whitelist"
There have been one report in the wild suggesting that this needs to be tested better before doing:

https://discourse.gohugo.io/t/hugo-mod-failing-in-v0-91-1-but-works-in-v0-91-0/36180/5

This reverts commit fca266ebbb.
2021-12-23 16:23:15 +01:00
Bjørn Erik Pedersen 2648d3088c netlify: Hugo 0.91.1 2021-12-22 17:20:30 +01:00
Bjørn Erik Pedersen d0801599cf Merge branch 'tempv0.91.1' 2021-12-22 17:19:10 +01:00
Bjørn Erik Pedersen b343bfd7aa config/security: Add HOME to default exec env var whitelist
See #9309
2021-12-22 11:33:59 +01:00
Joe Mooring 03fbb403f3 Update data-templates.md
Closes #1610
2021-12-19 19:21:09 -08:00
Joe Mooring 2f608055ff Correct GetRemote docs and examples 2021-12-17 16:51:02 +01:00
Bjørn Erik Pedersen 4e942166ab Update 2021-12-17-no-more-releasenotes.md 2021-12-17 13:26:03 +01:00
Bjørn Erik Pedersen dbf9514fd6 Update security.toml
Add BRANCH to env whitelist.
2021-12-17 13:22:58 +01:00
Bjørn Erik Pedersen 2c38aa356c Update index.md 2021-12-17 13:21:28 +01:00
Bjørn Erik Pedersen 562ad8e969 Add timeZone 2021-12-17 13:19:44 +01:00
Bjørn Erik Pedersen 4bc4821521 Update introduction.md 2021-12-17 12:27:49 +01:00
Bjørn Erik Pedersen 1eb66c758b news: Add a note about the placement of release notes 2021-12-17 12:25:18 +01:00
Bjørn Erik Pedersen b2a293abb1 Remove the default archetype template 2021-12-17 12:22:35 +01:00
Bjørn Erik Pedersen f9837793ca netlify: Hugo 0.91.0 2021-12-17 12:19:31 +01:00
Bjørn Erik Pedersen 467256ad5a docs: Regen docs helper 2021-12-17 10:31:08 +01:00
Bjørn Erik Pedersen 68554cf77c Add some basic security policies with sensible defaults
This ommmit contains some security hardening measures for the Hugo build runtime.

There are some rarely used features in Hugo that would be good to have disabled by default. One example would be the "external helpers".

For `asciidoctor` and some others we use Go's `os/exec` package to start a new process.

These are a predefined set of binary names, all loaded from `PATH` and with a predefined set of arguments. Still, if you don't use `asciidoctor` in your project, you might as well have it turned off.

You can configure your own in the new `security` configuration section, but the defaults are configured to create a minimal amount of site breakage. And if that do happen, you will get clear instructions in the loa about what to do.

The default configuration is listed below. Note that almost all of these options are regular expression _whitelists_ (a string or a slice); the value `none` will block all.

```toml
[security]
  enableInlineShortcodes = false
  [security.exec]
    allow = ['^dart-sass-embedded$', '^go$', '^npx$', '^postcss$']
    osEnv = ['(?i)^(PATH|PATHEXT|APPDATA|TMP|TEMP|TERM)$']

  [security.funcs]
    getenv = ['^HUGO_']

  [security.http]
    methods = ['(?i)GET|POST']
    urls = ['.*']
```
2021-12-16 09:40:22 +01:00
Bjørn Erik Pedersen 4eb10c1a96 Set a sensible maxAge on the image cache 2021-12-12 15:18:21 +01:00
Bjørn Erik Pedersen 2c37f4f898 Update lists.md 2021-12-11 20:31:28 +01:00
Bjørn Erik Pedersen 8690c018fd Update introduction.md 2021-12-11 18:27:35 +01:00
Bjørn Erik Pedersen 0458c3d887 Update index.md 2021-12-11 16:04:06 +01:00
Bjørn Erik Pedersen 150982f5eb Update index.md 2021-12-11 16:01:25 +01:00
Bjørn Erik Pedersen 50dc0b6b9d Update multilingual.md 2021-12-11 15:55:48 +01:00
Bjørn Erik Pedersen 648598090e Configure image cache to use :cacheDir/images
That should make the Netlify builds faster, now that we don't store the images in Git anymore.
2021-12-11 15:45:23 +01:00
Bjørn Erik Pedersen 4dfb523c31 Update introduction.md 2021-12-11 15:01:02 +01:00
Bjørn Erik Pedersen b94d42e6f3 Add text to social images 2021-12-11 14:51:05 +01:00
Bjørn Erik Pedersen d3253d2aa2 Add resources/_gen/images/ to .gitignore
Fixes #1607
2021-12-11 13:40:14 +01:00
Bjørn Erik Pedersen 8a56e1dfd4 Delete resources/_gen/images 2021-12-11 13:36:52 +01:00
Bjørn Erik Pedersen 1521e79b67 Update introduction.md 2021-12-11 00:33:52 +01:00
Bjørn Erik Pedersen c7110a5971 Update introduction.md 2021-12-10 23:34:08 +01:00
Bjørn Erik Pedersen f7c4d220f8 Update introduction.md 2021-12-10 23:32:49 +01:00
Bjørn Erik Pedersen c14ecf1ff9 Update introduction.md 2021-12-10 23:29:23 +01:00
Ian Maddaus c4b388c202 Fix shortcode in hugo-pipes/introduction (#1605) 2021-12-10 14:01:28 -08:00
Bjørn Erik Pedersen d9876bd68e Update introduction.md 2021-12-10 13:44:31 +01:00
Bjørn Erik Pedersen a39a532d50 Update introduction.md 2021-12-10 13:27:31 +01:00
Bjørn Erik Pedersen fa8758122d netlify: Hugo 0.90.1 2021-12-10 13:08:50 +01:00
Joe Mooring 50cc405704 Update Contribute to Hugo Development
Closes #1600
2021-12-09 11:24:55 +01:00
Joe Mooring fc98fc82c3 Add .vscode dir to .gitignore (#1602) 2021-12-08 19:44:12 -08:00
Joe Mooring 8f8bcdefc0 Add frontmatter param to code-toggle shortcode (#1601)
Closes #1598
2021-12-08 18:51:26 -08:00
Joe Mooring f3b432c7c9 Add markdownlint configuration file (#1597)
Closes #1102
2021-12-08 09:00:09 -08:00
Bjørn Erik Pedersen 7ea3aea929 netlify: Bump to 0.90.0 2021-12-08 11:42:28 +01:00
Bjørn Erik Pedersen e2b6f990b8 docs: Regenerate docs helper 2021-12-08 08:56:16 +01:00
Bjørn Erik Pedersen c02259e332 Merge commit '8d9511a08f14260cbfb73119e4afae50e5a9966d' 2021-12-08 08:54:25 +01:00
Joe Mooring 316cec2494 Update future events template example (#1595)
Closes #593
2021-12-07 09:09:40 -08:00
Bjørn Erik Pedersen 2e3573899e Add custom font support to images.Text
Fixes #9253
2021-12-07 16:53:02 +01:00
Paul van Brouwershaven 3186e6458d images: Text filter that draws text with the given options (#9239)
Fixes #9238
2021-12-07 11:29:55 +01:00
Joe Mooring 424f219ebc tpl/transform: Optional options for highlight func
Closes #9249
Fixes gohugoio/hugoDocs#63
2021-12-07 11:26:56 +01:00