boostsecurityio / boostsecurityio/lotp
[LOTP] Add hugo
Open
good first issue
idea
- Dominant language
- HTML
- Stars
- 164
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
# Description of the LOTP tool
hugo is a website rendering tool that has plugins that can be configured we a config file.
# Configuration files
```
hugo.toml
...
```
Hugo is very well designed and its virtual FS and other hardening features makes it quite safe in many cases, though if attacker can control hugo.toml it's still an issue, though we've seen cases in the wild where just `*.md` were exposed and through that vector we think there is no known "jailbreak" at the moment.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.