When reviewing the code last week, I wondered whether the Twig template generated by the Sphinx build were safe. I haven't reported it at this time because I was not sure. So in the train today, I wrote a test to verify it. And with it came the fix.
The previous sphinx theme was allowing the content of the documentation to be parsed by Twig. This makes the code more robust (I think there might still be an issue if the documentation contains {% endverbatim %} though)
everzet
commented
9 years ago
When reviewing the code last week, I wondered whether the Twig template generated by the Sphinx build were safe. I haven't reported it at this time because I was not sure. So in the train today, I wrote a test to verify it. And with it came the fix. The previous sphinx theme was allowing the content of the documentation to be parsed by Twig. This makes the code more robust (I think there might still be an issue if the documentation contains
{% endverbatim %}though)