You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The include directive in asciidoctor documents doesn't seem to be usable at the moment for readme, it fails both when:
attempting to use the "raw" URL, probably due to this and/or a higher safety mode used.
attempting to use a relative path also fails (example here ).
Is there any possibility of a workaround/fix?
The text was updated successfully, but these errors were encountered:
mikolak-net
changed the title
include:: doesn't seem to be usable for github repos
asciidoctor include:: doesn't seem to be usable for github repos
Jul 17, 2014
Due to potential security issues, include:: is not supported by GitHub at this time. We don't know if or when we'll add such a feature, but I've added your request to our internal feature request list.
@gjtorikian re inherent insecurity of include directives, completely understable, given how my background includes PHP ;).
Nevertheless, I think properly pre-sanitized includes limited to only, say, files in the same repo (or same user's repos) would be safe enough, so 👍 on the add.
We need to do some planning and negotiating first, then we can possibly move forwards with an implementation. The limitations have to do as much about security as they are technical.
The
include
directive inasciidoctor
documents doesn't seem to be usable at the moment for readme, it fails both when:Is there any possibility of a workaround/fix?
The text was updated successfully, but these errors were encountered: