Add feature for layouts vuln.
This commit is contained in:
parent
0e68d34e1b
commit
05f1fac2a7
|
@ -273,3 +273,11 @@ Feature: Site configuration
|
||||||
And I should see "Whatever" in "_site/index.html"
|
And I should see "Whatever" in "_site/index.html"
|
||||||
And the "_site/test.txt" file should exist
|
And the "_site/test.txt" file should exist
|
||||||
And I should see "this is a test" in "_site/test.txt"
|
And I should see "this is a test" in "_site/test.txt"
|
||||||
|
|
||||||
|
Scenario: arbitrary file reads via layouts
|
||||||
|
Given I have an "index.html" page with layout "page" that contains "FOO"
|
||||||
|
And I have a "_config.yml" file that contains "layouts: '../../../../../../../../../../../../../../usr/include'"
|
||||||
|
When I run jekyll build
|
||||||
|
Then the _site directory should exist
|
||||||
|
And I should see "FOO" in "_site/index.html"
|
||||||
|
And I should not see " " in "_site/index.html"
|
||||||
|
|
Loading…
Reference in New Issue