fix: whitelist VERSION and CURRENT_VERSION env vars (#1870)

99designs · Jan 30, 2022 · a30b68d · a30b68d
1 parent 76a533b
commit a30b68d
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -1,5 +1,6 @@
 /vendor
 /docs/public
+/docs/.hugo_build.lock
 /example/chat/node_modules
 /integration/node_modules
 /integration/schema-fetched.graphql

diff --git a/docs/config.yml b/docs/config.yml
@@ -24,3 +24,10 @@ menu:
     - name: pkg.go.dev →
       parent: reference
       url: https://pkg.go.dev/github.com/99designs/gqlgen
+
+security:
+  funcs:
+    getenv:
+    - '^HUGO_'
+    - 'VERSIONS'
+    - 'CURRENT_VERSION'