spanezz / staticsite

Static site generator
GNU General Public License v3.0
45 stars 7 forks source link

Make sure that site_path cannot begin with a slash #43

Open spanezz opened 4 years ago

spanezz commented 4 years ago

A metadata defining an absolute path in site_path, can cause the rendered file to be written to arbitrary locations in the file system, due to the behaviour of os.path.join with absolute paths.

Make sure we test that leading slashes are stripped from site_path when processing pages, so that the generated build_path entries are all relative path.