Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix upstream Go templates bug with reversed key/value assignment #11114

Merged
merged 1 commit into from
Jun 15, 2023

Commits on Jun 15, 2023

  1. Fix upstream Go templates bug with reversed key/value assignment

    The template packages are based on go1.20.5 with the patch in befec5ddbbfbd81ec84e74e15a38044d67f8785b  added.
    
    This also includes a security fix that now disallows Go template actions in JS literals (inside backticks).
    
    This will throw an error saying "... appears in a JS template literal".
    
    If you're really sure this isn't a security risk in your case, you can revert to the old behaviour:
    
    ```toml
    [security]
    [security.gotemplates]
    allowActionJSTmpl = true
    ```
    
    See golang/go#59234
    
    Fixes gohugoio#11112
    bep committed Jun 15, 2023
    Configuration menu
    Copy the full SHA
    5c9b678 View commit details
    Browse the repository at this point in the history