Open aral opened 4 years ago
Hm, couldn't it be a security risk to allow eleventy to point to directories above it's own?
I’m no longer evaluating eleventy due to this (incorporated Hugo instead) so please feel free to close this if you don’t consider it an issue.
Eleventy’s server (
--serve
) fails to launch when--input
is the current directory and--output
is a directory in the parent directory. (Compilation – i.e.,write()
– and--watch
succeed.)In this particular instance, the failure (see debug log) appears to be because
scandir
is trying to scan all the folders in the parent directory and it doesn’t have privileges to do so (and it shouldn’t be anyway).To Reproduce
Install Eleventy.
Create a new parent directory and change the current working directory to it.
Clone the base blog example.
Change to the base blog example’s directory and install its dependencies
Run Eleventy.
What should happen
Eleventy should compile the source in ./ and output it to /.eleventy-base-blog-site.
What actually happens
The following error is triggered (compiler output truncated; full debug output at end):
Environment:
Additional context
Full debug output (sans timings):