Add feature for layouts vuln.

This commit is contained in:
Ben Balter 2014-07-01 18:28:51 -04:00 committed by Parker Moore
parent 0e68d34e1b
commit 05f1fac2a7
1 changed files with 8 additions and 0 deletions

View File

@ -273,3 +273,11 @@ Feature: Site configuration
And I should see "Whatever" in "_site/index.html"
And the "_site/test.txt" file should exist
And I should see "this is a test" in "_site/test.txt"
Scenario: arbitrary file reads via layouts
Given I have an "index.html" page with layout "page" that contains "FOO"
And I have a "_config.yml" file that contains "layouts: '../../../../../../../../../../../../../../usr/include'"
When I run jekyll build
Then the _site directory should exist
And I should see "FOO" in "_site/index.html"
And I should not see " " in "_site/index.html"