boostsecurityio / boostsecurityio/lotp

[LOTP] Add hugo

Open
#39 0 comments 0 reactions 0 assignees View on GitHub
good first issue idea
Dominant language
HTML
Stars
164
Forks
14
PR merge metrics
No merged PRs in 30d

Description

# Description of the LOTP tool

hugo is a website rendering tool that has plugins that can be configured we a config file.

# Configuration files

```
hugo.toml
...
```

Hugo is very well designed and its virtual FS and other hardening features makes it quite safe in many cases, though if attacker can control hugo.toml it's still an issue, though we've seen cases in the wild where just `*.md` were exposed and through that vector we think there is no known "jailbreak" at the moment.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.