Closed Skeeve closed 11 months ago
I think this feature needs a bit more discussion.
The //
pretty custom and not intuitive. Allowing file access outside the base directory could also cause undesired access patterns (e.g. being able to print the mark config that includes the credentials to confluence) into confluence. In particular in CI pipelines this could be a risk.
In the next couple of months I want to move all the custom logic (e.g. Macros, Includes, etc.) into the goldmark extension as well to avoid having two different places for file manipulation.
You can already access the config file to print the credentials when you know its position in relation to the current directory. So I do not see any security gain here.
Regarding //
I simply used it because
a. It's normally nothing a path starts with.
b. I had no other idea, but I would be happy to adopt any other reasonable proposal.
What about this idea:
I think it could be handy to have globel includes.
But as the path has to be relative to the current working directory, I created this patch: