wjh18 / hugo-liftoff

Minimal blog/portfolio theme with a focus on content creation and SEO best practices. An ideal choice for technical users jump-starting a personal brand.
https://hugo-liftoff.netlify.app
MIT License
93 stars 27 forks source link

Location of security settings for 'newContentEditor' #36

Open exen904 opened 1 year ago

exen904 commented 1 year ago

Describe the bug Using the 'newContentEditor' line does not work as expected, as to not being configured in the security settings

To Reproduce Steps to reproduce the behavior: Create new content with newContentEditor = 'code'

Expected behavior Creating the content file and also opening the editor

Log

Editing "/home/daniel/Documents/GitHub/test_liftoff/content/posts/umzug.md" with "code" ...
Error: access denied: "code" is not whitelisted in policy "security.exec.allow"; the current security configuration is:

[security]
  enableInlineShortcodes = false

  [security.exec]
    allow = ['^(dart-)?sass(-embedded)?$', '^go$', '^npx$', '^postcss$']
    osEnv = ['(?i)^((HTTPS?|NO)_PROXY|PATH(EXT)?|APPDATA|TE?MP|TERM|GO\w+|(XDG_CONFIG_)?HOME|USERPROFILE|SSH_AUTH_SOCK|DISPLAY|LANG)$']

  [security.funcs]
    getenv = ['^HUGO_', '^CI$']

  [security.goTemplates]
    AllowActionJSTmpl = false

  [security.http]
    methods = ['(?i)GET|POST']
    urls = ['.*']

Additional context Getting the current config with hugo config also shows the security settings, but I was unable to find them with the config file split