Use Marshal to duplicate configuration defaults to prevent manipulation

2016-04-04 13:13:06 -07:00 · 2016-04-04 13:13:06 -07:00 · 04d4473119
parent dbcbf809ff
commit 04d4473119
1 changed files with 1 additions and 1 deletions
--- a/lib/jekyll.rb
+++ b/lib/jekyll.rb
@ -99,7 +99,7 @@ module Jekyll
    #
    # Returns the final configuration Hash.
    def configuration(override = {})
-      config = Configuration[Configuration::DEFAULTS]
+      config = Configuration[Marshal.load(Marshal.dump(Configuration::DEFAULTS))]
      override = Configuration[override].stringify_keys
      unless override.delete('skip_config_files')
        config = config.read_config_files(config.config_files(override))