refactor(frontmatter): constrain frontmatter object after parsing
This change removes the meta-marked dependency which solely was used for extracting the frontmatter, which is possible as well with one function. Furthermore, this introduces constraints to objects resulting from frontmatter parsing and enforces them in order to prevent attacks like a yaml bomb (massive alias expansion). This change should resolve a possible DoS attack. Signed-off-by: Erik Michelson <github@erik.michelson.eu>
This commit is contained in:
@@ -1,4 +1,5 @@
|
||||
<script src="config"></script>
|
||||
<script src="build/constrain-object.min.js"></script>
|
||||
<% for (var js in htmlWebpackPlugin.files.js) { %>
|
||||
<script src="<%= htmlWebpackPlugin.files.js[js] %>" defer></script>
|
||||
<% } %>
|
||||
|
||||
Reference in New Issue
Block a user