boostsecurityio/lotp

[LOTP] Add hugo

Open

#39 ouverte le 17 nov. 2024

Voir sur GitHub
 (0 commentaires) (0 réactions) (0 assignés)HTML (14 forks)auto 404
good first issueidea

Métriques du dépôt

Stars
 (158 stars)
Métriques de merge PR
 (Métriques PR en attente)

Description

Description of the LOTP tool

hugo is a website rendering tool that has plugins that can be configured we a config file.

Configuration files

hugo.toml
...

Hugo is very well designed and its virtual FS and other hardening features makes it quite safe in many cases, though if attacker can control hugo.toml it's still an issue, though we've seen cases in the wild where just *.md were exposed and through that vector we think there is no known "jailbreak" at the moment.

Guide contributeur