search

bridgetownrb / bridgetown-feed

A Bridgetown plugin to generate an Atom feed of your Bridgetown posts
MIT License
20 stars 7 forks source link

🚨 Major data leak with Liquid 5.5 #17

Closed jaredcwhite closed 7 months ago

jaredcwhite commented 7 months ago

There seems to be some kind of bizarre data leakage with Liquid 5.5. The site.collections hash ends up with a context key that's a Liquid::Context object, which can crash a site build. I'm not yet sure why this is happening, only that on Bridgetown sites which use this feed plugin and have upgraded to Liquid 5.5, everything goes haywire.

jaredcwhite commented 7 months ago

This is actually a problem even with stock Bridgetown sites using Liquid templates, so there's a problem with Liquid 5.5 in general. I'm releasing a Bridgetown patch to lock the Liquid gem to 5.4. To be revisited at a later date…