jekyll-docs 3.9.0 → 4.0.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (225) hide show
  1. checksums.yaml +4 -4
  2. data/lib/jekyll-docs.rb +3 -3
  3. data/site/404.html +10 -7
  4. data/site/css/screen.css +3 -1
  5. data/site/css/screen.css.map +28 -0
  6. data/site/docs/assets/index.html +412 -453
  7. data/site/docs/code_of_conduct/index.html +447 -501
  8. data/site/docs/collections/index.html +487 -674
  9. data/site/docs/community/bug/index.html +603 -0
  10. data/site/docs/community/index.html +635 -0
  11. data/site/docs/conduct/index.html +447 -515
  12. data/site/docs/configuration/default/index.html +682 -0
  13. data/site/docs/configuration/environments/index.html +641 -0
  14. data/site/docs/configuration/front-matter-defaults/index.html +738 -0
  15. data/site/docs/configuration/incremental-regeneration/index.html +631 -0
  16. data/site/docs/configuration/index.html +405 -1230
  17. data/site/docs/configuration/liquid/index.html +616 -0
  18. data/site/docs/configuration/markdown/index.html +766 -0
  19. data/site/docs/configuration/options/index.html +1011 -0
  20. data/site/docs/configuration/webrick/index.html +615 -0
  21. data/site/docs/continuous-integration/buddyworks/index.html +393 -479
  22. data/site/docs/continuous-integration/circleci/index.html +465 -481
  23. data/site/docs/continuous-integration/travis-ci/index.html +450 -507
  24. data/site/docs/contributing/index.html +425 -514
  25. data/site/docs/datafiles/index.html +411 -453
  26. data/site/docs/deployment-methods/index.html +9 -871
  27. data/site/docs/deployment/automated/index.html +663 -0
  28. data/site/docs/deployment/index.html +607 -0
  29. data/site/docs/deployment/manual/index.html +631 -0
  30. data/site/docs/deployment/third-party/index.html +639 -0
  31. data/site/docs/drafts/index.html +9 -634
  32. data/site/docs/extras/index.html +9 -687
  33. data/site/docs/front-matter/index.html +799 -0
  34. data/site/docs/frontmatter/index.html +9 -819
  35. data/site/docs/github-pages/index.html +407 -475
  36. data/site/docs/history/index.html +1370 -1154
  37. data/site/docs/home/index.html +9 -627
  38. data/site/docs/includes/index.html +425 -501
  39. data/site/docs/index.html +630 -9
  40. data/site/docs/installation/index.html +403 -540
  41. data/site/docs/installation/macos/index.html +716 -0
  42. data/site/docs/installation/other-linux/index.html +613 -0
  43. data/site/docs/installation/ubuntu/index.html +623 -0
  44. data/site/docs/installation/windows/index.html +733 -0
  45. data/site/docs/layouts/index.html +726 -0
  46. data/site/docs/liquid/filters/index.html +1169 -0
  47. data/site/docs/liquid/index.html +615 -0
  48. data/site/docs/liquid/tags/index.html +728 -0
  49. data/site/docs/maintaining/affinity-team-captain/index.html +395 -479
  50. data/site/docs/maintaining/avoiding-burnout/index.html +391 -475
  51. data/site/docs/maintaining/becoming-a-maintainer/index.html +391 -475
  52. data/site/docs/maintaining/index.html +391 -486
  53. data/site/docs/maintaining/merging-a-pull-request/index.html +406 -490
  54. data/site/docs/maintaining/releasing-a-new-version/index.html +409 -485
  55. data/site/docs/maintaining/reviewing-a-pull-request/index.html +392 -476
  56. data/site/docs/maintaining/special-labels/index.html +397 -481
  57. data/site/docs/maintaining/triaging-an-issue/index.html +394 -478
  58. data/site/docs/markdown-101/index.html +601 -0
  59. data/site/docs/migrations/index.html +396 -440
  60. data/site/docs/pages/index.html +408 -482
  61. data/site/docs/pagination/index.html +450 -509
  62. data/site/docs/permalinks/index.html +552 -587
  63. data/site/docs/plugins/commands/index.html +656 -0
  64. data/site/docs/plugins/converters/index.html +685 -0
  65. data/site/docs/plugins/filters/index.html +624 -0
  66. data/site/docs/plugins/generators/index.html +697 -0
  67. data/site/docs/plugins/hooks/index.html +838 -0
  68. data/site/docs/plugins/index.html +415 -1565
  69. data/site/docs/plugins/installation/index.html +681 -0
  70. data/site/docs/plugins/tags/index.html +699 -0
  71. data/site/docs/plugins/your-first-plugin/index.html +741 -0
  72. data/site/docs/posts/index.html +491 -627
  73. data/site/docs/quickstart/index.html +9 -645
  74. data/site/docs/resources/index.html +9 -761
  75. data/site/docs/ruby-101/index.html +640 -0
  76. data/site/docs/sites/index.html +9 -696
  77. data/site/docs/static-files/index.html +401 -433
  78. data/site/docs/step-by-step/01-setup/index.html +771 -0
  79. data/site/docs/step-by-step/02-liquid/index.html +756 -0
  80. data/site/docs/step-by-step/03-front-matter/index.html +730 -0
  81. data/site/docs/step-by-step/04-layouts/index.html +770 -0
  82. data/site/docs/step-by-step/05-includes/index.html +768 -0
  83. data/site/docs/step-by-step/06-data-files/index.html +738 -0
  84. data/site/docs/step-by-step/07-assets/index.html +773 -0
  85. data/site/docs/step-by-step/08-blogging/index.html +835 -0
  86. data/site/docs/step-by-step/09-collections/index.html +932 -0
  87. data/site/docs/step-by-step/10-deployment/index.html +842 -0
  88. data/site/docs/structure/index.html +411 -430
  89. data/site/docs/support/index.html +392 -476
  90. data/site/docs/templates/index.html +9 -1232
  91. data/site/docs/themes/index.html +487 -521
  92. data/site/docs/troubleshooting/index.html +443 -520
  93. data/site/docs/upgrading/0-to-2/index.html +437 -523
  94. data/site/docs/upgrading/2-to-3/index.html +422 -507
  95. data/site/docs/upgrading/3-to-4/index.html +765 -0
  96. data/site/docs/upgrading/index.html +395 -478
  97. data/site/docs/usage/index.html +409 -506
  98. data/site/docs/variables/index.html +504 -652
  99. data/site/docs/windows/index.html +9 -784
  100. data/site/feed.xml +269 -188
  101. data/site/feed/release.xml +324 -0
  102. data/site/fonts/lato-v14-latin-300.woff +0 -0
  103. data/site/fonts/lato-v14-latin-300.woff2 +0 -0
  104. data/site/fonts/lato-v14-latin-300italic.woff +0 -0
  105. data/site/fonts/lato-v14-latin-300italic.woff2 +0 -0
  106. data/site/fonts/lato-v14-latin-700.woff +0 -0
  107. data/site/fonts/lato-v14-latin-700.woff2 +0 -0
  108. data/site/fonts/lato-v14-latin-700italic.woff +0 -0
  109. data/site/fonts/lato-v14-latin-700italic.woff2 +0 -0
  110. data/site/fonts/lato-v14-latin-900.woff +0 -0
  111. data/site/fonts/lato-v14-latin-900.woff2 +0 -0
  112. data/site/fonts/lato-v14-latin-900italic.woff +0 -0
  113. data/site/fonts/lato-v14-latin-900italic.woff2 +0 -0
  114. data/site/fonts/lato-v14-latin-italic.woff +0 -0
  115. data/site/fonts/lato-v14-latin-italic.woff2 +0 -0
  116. data/site/fonts/lato-v14-latin-regular.woff +0 -0
  117. data/site/fonts/lato-v14-latin-regular.woff2 +0 -0
  118. data/site/help/index.html +9 -247
  119. data/site/img/forestry-logo.svg +19 -0
  120. data/site/img/jekyll-og.png +0 -0
  121. data/site/img/spacer.gif +0 -0
  122. data/site/index.html +56 -29
  123. data/site/jekyllconf/index.html +62 -35
  124. data/site/latest_version.txt +1 -1
  125. data/site/news/2013/05/05/jekyll-1-0-0-released/index.html +180 -115
  126. data/site/news/2013/05/08/jekyll-1-0-1-released/index.html +182 -117
  127. data/site/news/2013/05/12/jekyll-1-0-2-released/index.html +183 -118
  128. data/site/news/2013/06/07/jekyll-1-0-3-released/index.html +184 -119
  129. data/site/news/2013/07/14/jekyll-1-1-0-released/index.html +183 -118
  130. data/site/news/2013/07/24/jekyll-1-1-1-released/index.html +180 -115
  131. data/site/news/2013/07/25/jekyll-1-0-4-released/index.html +182 -117
  132. data/site/news/2013/07/25/jekyll-1-1-2-released/index.html +182 -117
  133. data/site/news/2013/09/06/jekyll-1-2-0-released/index.html +185 -120
  134. data/site/news/2013/09/14/jekyll-1-2-1-released/index.html +183 -118
  135. data/site/news/2013/10/28/jekyll-1-3-0-rc1-released/index.html +180 -115
  136. data/site/news/2013/11/04/jekyll-1-3-0-released/index.html +189 -124
  137. data/site/news/2013/11/26/jekyll-1-3-1-released/index.html +181 -116
  138. data/site/news/2013/12/07/jekyll-1-4-0-released/index.html +181 -116
  139. data/site/news/2013/12/09/jekyll-1-4-1-released/index.html +180 -115
  140. data/site/news/2013/12/16/jekyll-1-4-2-released/index.html +182 -117
  141. data/site/news/2014/01/13/jekyll-1-4-3-released/index.html +181 -116
  142. data/site/news/2014/03/24/jekyll-1-5-0-released/index.html +181 -116
  143. data/site/news/2014/03/27/jekyll-1-5-1-released/index.html +181 -116
  144. data/site/news/2014/05/06/jekyll-turns-2-0-0/index.html +184 -119
  145. data/site/news/2014/05/08/jekyll-2-0-3-released/index.html +180 -115
  146. data/site/news/2014/06/04/jekyll-stickers-1-dollar-stickermule/index.html +181 -116
  147. data/site/news/2014/06/28/jekyll-turns-21-i-mean-2-1-0/index.html +185 -120
  148. data/site/news/2014/07/01/jekyll-2-1-1-released/index.html +182 -117
  149. data/site/news/2014/07/29/jekyll-2-2-0-released/index.html +181 -116
  150. data/site/news/2014/08/10/jekyll-2-3-0-released/index.html +189 -124
  151. data/site/news/2014/09/09/jekyll-2-4-0-released/index.html +187 -122
  152. data/site/news/2014/11/05/jekylls-midlife-crisis-jekyll-turns-2-5-0/index.html +188 -123
  153. data/site/news/2014/11/09/jekyll-2-5-1-released/index.html +180 -115
  154. data/site/news/2014/11/12/jekyll-2-5-2-released/index.html +182 -117
  155. data/site/news/2014/12/17/alfredxing-welcome-to-jekyll-core/index.html +179 -114
  156. data/site/news/2014/12/22/jekyll-2-5-3-released/index.html +180 -115
  157. data/site/news/2015/01/20/jekyll-meet-and-greet/index.html +179 -114
  158. data/site/news/2015/01/24/jekyll-3-0-0-beta1-released/index.html +180 -115
  159. data/site/news/2015/02/26/introducing-jekyll-talk/index.html +180 -115
  160. data/site/news/2015/10/26/jekyll-3-0-released/index.html +185 -120
  161. data/site/news/2015/11/17/jekyll-3-0-1-released/index.html +184 -119
  162. data/site/news/2016/01/20/jekyll-3-0-2-released/index.html +182 -117
  163. data/site/news/2016/01/24/jekyll-3-1-0-released/index.html +186 -121
  164. data/site/news/2016/01/28/jekyll-3-1-1-released/index.html +183 -118
  165. data/site/news/2016/02/08/jekyll-3-0-3-released/index.html +181 -116
  166. data/site/news/2016/02/19/jekyll-3-1-2-released/index.html +182 -117
  167. data/site/news/2016/03/10/making-it-easier-to-contribute-to-jekyll/index.html +179 -114
  168. data/site/news/2016/04/19/jekyll-3-0-4-released/index.html +181 -116
  169. data/site/news/2016/04/19/jekyll-3-1-3-released/index.html +181 -116
  170. data/site/news/2016/04/26/jekyll-3-0-5-released/index.html +180 -115
  171. data/site/news/2016/05/18/jekyll-3-1-4-released/index.html +186 -121
  172. data/site/news/2016/05/18/jekyll-3-1-5-released/index.html +181 -116
  173. data/site/news/2016/05/19/jekyll-3-1-6-released/index.html +181 -116
  174. data/site/news/2016/06/03/update-on-jekyll-s-google-summer-of-code-projects/index.html +179 -114
  175. data/site/news/2016/07/26/jekyll-3-2-0-released/index.html +184 -119
  176. data/site/news/2016/08/02/jekyll-3-2-1-released/index.html +180 -115
  177. data/site/news/2016/08/24/jekyll-admin-initial-release/index.html +179 -114
  178. data/site/news/2016/10/06/jekyll-3-3-is-here/index.html +207 -142
  179. data/site/news/2016/11/14/jekyll-3-3-1-released/index.html +181 -116
  180. data/site/news/2017/01/18/jekyll-3-4-0-released/index.html +183 -118
  181. data/site/news/2017/03/02/jekyll-3-4-1-released/index.html +181 -116
  182. data/site/news/2017/03/09/jekyll-3-4-2-released/index.html +189 -124
  183. data/site/news/2017/03/21/jekyll-3-4-3-released/index.html +190 -125
  184. data/site/news/2017/06/15/jekyll-3-5-0-released/index.html +187 -122
  185. data/site/news/2017/07/17/jekyll-3-5-1-released/index.html +182 -117
  186. data/site/news/2017/08/12/jekyll-3-5-2-released/index.html +185 -120
  187. data/site/news/2017/09/21/jekyll-3-6-0-released/index.html +181 -116
  188. data/site/news/2017/10/19/diversity-open-source/index.html +181 -116
  189. data/site/news/2017/10/21/jekyll-3-6-2-released/index.html +183 -118
  190. data/site/news/2018/01/02/jekyll-3-7-0-released/index.html +184 -119
  191. data/site/news/2018/01/25/jekyll-3-7-2-released/index.html +189 -124
  192. data/site/news/2018/02/19/meet-jekyll-s-new-lead-developer/index.html +180 -115
  193. data/site/news/2018/02/24/jekyll-3-7-3-released/index.html +185 -120
  194. data/site/news/2018/04/19/development-update/index.html +699 -0
  195. data/site/news/2018/04/19/jekyll-3-8-0-released/index.html +715 -0
  196. data/site/news/2018/05/01/jekyll-3-8-1-released/index.html +182 -117
  197. data/site/news/2018/05/19/jekyll-3-8-2-released/index.html +181 -116
  198. data/site/news/2018/06/05/jekyll-3-8-3-released/index.html +183 -118
  199. data/site/news/2018/08/01/jekyll-sponsoring/index.html +748 -0
  200. data/site/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/index.html +692 -0
  201. data/site/news/2018/11/04/jekyll-3-8-5-released/index.html +682 -0
  202. data/site/news/2019/03/18/jekyll-4-0-0-pre-alpha1-released/index.html +710 -0
  203. data/site/news/2019/07/02/jekyll-3-8-6-released/index.html +180 -115
  204. data/site/news/2019/07/20/jekyll-4-0-0-pre-beta1-released/index.html +11 -0
  205. data/site/news/2019/08/04/jekyll-4-0-0-pre-beta1-released/index.html +708 -0
  206. data/site/news/2019/08/20/jekyll-4-0-0-released/index.html +809 -0
  207. data/site/news/index.html +976 -326
  208. data/site/news/releases/index.html +820 -321
  209. data/site/{philosophy.html → philosophy/index.html} +1 -1
  210. data/site/redirects.json +1 -1
  211. data/site/resources/index.html +332 -0
  212. data/site/showcase/index.html +844 -0
  213. data/site/sitemap.xml +256 -81
  214. data/site/team/index.html +63 -77
  215. data/site/tutorials/cache-api/index.html +418 -0
  216. data/site/tutorials/convert-site-to-jekyll/index.html +155 -124
  217. data/site/tutorials/custom-404-page/index.html +76 -43
  218. data/site/tutorials/home/index.html +64 -37
  219. data/site/tutorials/navigation/index.html +186 -103
  220. data/site/tutorials/orderofinterpretation/index.html +80 -53
  221. data/site/tutorials/using-jekyll-with-bundler/index.html +80 -51
  222. data/site/tutorials/video-walkthroughs/index.html +62 -35
  223. metadata +102 -13
  224. data/site/community/index.html +0 -11
  225. data/site/docs/continuous-integration/index.html +0 -681
@@ -0,0 +1,692 @@
1
+ <!DOCTYPE HTML>
2
+ <html lang="en-US">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <meta name="generator" content="Jekyll v4.0.0">
7
+ <link type="application/atom+xml" rel="alternate" href="https://jekyllrb.com/feed.xml" title="Jekyll • Simple, blog-aware, static sites" />
8
+ <link type="application/atom+xml" rel="alternate" href="/feed/release.xml" title="Jekyll releases posts" />
9
+ <link rel="alternate" type="application/atom+xml" title="Recent commits to Jekyll’s master branch" href="https://github.com/jekyll/jekyll/commits/master.atom">
10
+ <link rel="preload" href="/fonts/lato-v14-latin-300.woff2" as="font" type="font/woff2" crossorigin />
11
+ <link rel="preload" href="/fonts/lato-v14-latin-700.woff2" as="font" type="font/woff2" crossorigin />
12
+ <link rel="preload" href="/css/screen.css" as="style">
13
+ <link rel="stylesheet" href="/css/screen.css">
14
+ <link rel="icon" type="image/x-icon" href="/favicon.ico">
15
+ <!-- Begin Jekyll SEO tag v2.6.1 -->
16
+ <title>Security Fixes for series 3.6, 3.7 and 3.8 | Jekyll • Simple, blog-aware, static sites</title>
17
+ <meta name="generator" content="Jekyll v4.0.0" />
18
+ <meta property="og:title" content="Security Fixes for series 3.6, 3.7 and 3.8" />
19
+ <meta name="author" content="ashmaroli" />
20
+ <meta property="og:locale" content="en_US" />
21
+ <meta name="description" content="Hi Jekyllers," />
22
+ <meta property="og:description" content="Hi Jekyllers," />
23
+ <link rel="canonical" href="https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/" />
24
+ <meta property="og:url" content="https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/" />
25
+ <meta property="og:site_name" content="Jekyll • Simple, blog-aware, static sites" />
26
+ <meta property="og:image" content="https://jekyllrb.com/img/jekyll-og.png" />
27
+ <meta property="og:type" content="article" />
28
+ <meta property="article:published_time" content="2018-09-19T05:30:00-07:00" />
29
+ <meta name="twitter:card" content="summary_large_image" />
30
+ <meta property="twitter:image" content="https://jekyllrb.com/img/jekyll-og.png" />
31
+ <meta property="twitter:title" content="Security Fixes for series 3.6, 3.7 and 3.8" />
32
+ <meta name="twitter:site" content="@jekyllrb" />
33
+ <meta name="twitter:creator" content="@ashmaroli" />
34
+ <meta name="google-site-verification" content="onQcXpAvtHBrUI5LlroHNE_FP0b2qvFyPq7VZw36iEY" />
35
+ <script type="application/ld+json">
36
+ {"description":"Hi Jekyllers,","@type":"BlogPosting","mainEntityOfPage":{"@type":"WebPage","@id":"https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/"},"headline":"Security Fixes for series 3.6, 3.7 and 3.8","dateModified":"2018-09-19T05:30:00-07:00","url":"https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/","datePublished":"2018-09-19T05:30:00-07:00","image":"https://jekyllrb.com/img/jekyll-og.png","publisher":{"@type":"Organization","logo":{"@type":"ImageObject","url":"https://jekyllrb.com/img/logo-2x.png"},"name":"ashmaroli"},"author":{"@type":"Person","name":"ashmaroli"},"@context":"https://schema.org"}</script>
37
+ <!-- End Jekyll SEO tag -->
38
+
39
+ <!--[if lt IE 9]>
40
+ <script src="/js/html5shiv.min.js"></script>
41
+ <script src="/js/respond.min.js"></script>
42
+ <![endif]-->
43
+ </head>
44
+
45
+
46
+ <body class="wrap">
47
+ <header>
48
+ <div class="flexbox">
49
+ <div class="center-on-mobiles">
50
+ <h1>
51
+ <a href="/" class="logo">
52
+ <span class="sr-only">Jekyll</span>
53
+ <img src="/img/logo-2x.png" width="140" height="65" alt="Jekyll Logo">
54
+ </a>
55
+ </h1>
56
+ </div>
57
+ <nav class="main-nav hide-on-mobiles">
58
+ <ul>
59
+
60
+ <li>
61
+ <a href="/">Home</a>
62
+ </li>
63
+
64
+ <li>
65
+ <a href="/docs/">Docs</a>
66
+ </li>
67
+
68
+ <li>
69
+ <a href="/resources/">Resources</a>
70
+ </li>
71
+
72
+ <li>
73
+ <a href="/showcase/">Showcase</a>
74
+ </li>
75
+
76
+ <li class="current">
77
+ <a href="/news/">News</a>
78
+ </li>
79
+
80
+ </ul>
81
+
82
+ </nav>
83
+ <div class="search hide-on-mobiles">
84
+ <input type="text" id="docsearch-input" placeholder="Search the docs…">
85
+
86
+ </div>
87
+ <div class="meta hide-on-mobiles">
88
+ <ul>
89
+ <li>
90
+ <a href="https://github.com/jekyll/jekyll/releases/tag/v4.0.0">v4.0.0</a>
91
+ </li>
92
+ <li>
93
+ <a href="https://github.com/jekyll/jekyll">GitHub</a>
94
+ </li>
95
+ </ul>
96
+ </div>
97
+ </div>
98
+ <nav class="mobile-nav show-on-mobiles">
99
+ <ul>
100
+
101
+ <li>
102
+ <a href="/">Home</a>
103
+ </li>
104
+
105
+ <li>
106
+ <a href="/docs/">Docs</a>
107
+ </li>
108
+
109
+ <li>
110
+ <a href="/resources/">Resources</a>
111
+ </li>
112
+
113
+
114
+ <li class="current">
115
+ <a href="/news/">News</a>
116
+ </li>
117
+
118
+ <li>
119
+ <a href="https://github.com/jekyll/jekyll">GitHub</a>
120
+ </li>
121
+ </ul>
122
+
123
+ </nav>
124
+ </header>
125
+
126
+
127
+ <section class="news">
128
+ <div class="grid">
129
+
130
+ <div class="docs-nav-mobile unit whole show-on-mobiles">
131
+ <select onchange="if (this.value) window.location.href=this.value">
132
+ <option value="">Navigate the blog…</option>
133
+ <option value="/news/">Home</option>
134
+ <optgroup label="posts">
135
+
136
+ <option value="/news/2019/08/20/jekyll-4-0-0-released/">Jekyll 4.0.0 Released</option>
137
+
138
+ <option value="/news/2019/08/04/jekyll-4-0-0-pre-beta1-released/">Jekyll 4.0.0.pre.beta1 Released</option>
139
+
140
+ <option value="/news/2019/07/02/jekyll-3-8-6-released/">Jekyll 3.8.6 Released</option>
141
+
142
+ <option value="/news/2019/03/18/jekyll-4-0-0-pre-alpha1-released/">Jekyll 4.0.0.pre.alpha1 Released</option>
143
+
144
+ <option value="/news/2018/11/04/jekyll-3-8-5-released/">Jekyll 3.8.5 Released</option>
145
+
146
+ <option value="/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/">Security Fixes for series 3.6, 3.7 and 3.8</option>
147
+
148
+ <option value="/news/2018/08/01/jekyll-sponsoring/">Sponsoring Jekyll's development</option>
149
+
150
+ <option value="/news/2018/06/05/jekyll-3-8-3-released/">Jekyll 3.8.3 Released</option>
151
+
152
+ <option value="/news/2018/05/19/jekyll-3-8-2-released/">Jekyll 3.8.2 Released</option>
153
+
154
+ <option value="/news/2018/05/01/jekyll-3-8-1-released/">Jekyll 3.8.1 Released</option>
155
+
156
+ <option value="/news/2018/04/19/development-update/">Jekyll 4.0 is on the Horizon!</option>
157
+
158
+ <option value="/news/2018/04/19/jekyll-3-8-0-released/">Jekyll 3.8.0 Released</option>
159
+
160
+ <option value="/news/2018/02/24/jekyll-3-7-3-released/">Jekyll 3.7.3 Released</option>
161
+
162
+ <option value="/news/2018/02/19/meet-jekyll-s-new-lead-developer/">Meet Jekyll's New Lead Developer</option>
163
+
164
+ <option value="/news/2018/01/25/jekyll-3-7-2-released/">Jekyll 3.7.2 Released</option>
165
+
166
+ <option value="/news/2018/01/02/jekyll-3-7-0-released/">Jekyll 3.7.0 Released</option>
167
+
168
+ <option value="/news/2017/10/21/jekyll-3-6-2-released/">Jekyll 3.6.2 Released</option>
169
+
170
+ <option value="/news/2017/10/19/diversity-open-source/">Diversity in Open Source, and Jekyll's role in it</option>
171
+
172
+ <option value="/news/2017/09/21/jekyll-3-6-0-released/">Jekyll turns 3.6!</option>
173
+
174
+ <option value="/news/2017/08/12/jekyll-3-5-2-released/">Jekyll 3.5.2 Released</option>
175
+
176
+ <option value="/news/2017/07/17/jekyll-3-5-1-released/">Jekyll 3.5.1 Released</option>
177
+
178
+ <option value="/news/2017/06/15/jekyll-3-5-0-released/">Jekyll turns 3.5, oh my!</option>
179
+
180
+ <option value="/news/2017/03/21/jekyll-3-4-3-released/">Jekyll 3.4.3 Released</option>
181
+
182
+ <option value="/news/2017/03/09/jekyll-3-4-2-released/">Jekyll 3.4.2 Released</option>
183
+
184
+ <option value="/news/2017/03/02/jekyll-3-4-1-released/">Jekyll 3.4.1, or "Unintended Consequences"</option>
185
+
186
+ <option value="/news/2017/01/18/jekyll-3-4-0-released/">Jekyll turns 3.4.0</option>
187
+
188
+ <option value="/news/2016/11/14/jekyll-3-3-1-released/">Jekyll 3.3.1 Released</option>
189
+
190
+ <option value="/news/2016/10/06/jekyll-3-3-is-here/">Jekyll 3.3 is here with better theme support, new URL filters, and tons more</option>
191
+
192
+ <option value="/news/2016/08/24/jekyll-admin-initial-release/">Jekyll Admin Initial Release</option>
193
+
194
+ <option value="/news/2016/08/02/jekyll-3-2-1-released/">Jekyll 3.2.1 Released with Fix for Windows</option>
195
+
196
+ <option value="/news/2016/07/26/jekyll-3-2-0-released/">Jekyll turns 3.2</option>
197
+
198
+ <option value="/news/2016/06/03/update-on-jekyll-s-google-summer-of-code-projects/">Jekyll's Google Summer of Code Project: The CMS You Always Wanted</option>
199
+
200
+ <option value="/news/2016/05/19/jekyll-3-1-6-released/">Jekyll 3.1.6 Released</option>
201
+
202
+ <option value="/news/2016/05/18/jekyll-3-1-5-released/">Jekyll 3.1.5 Released</option>
203
+
204
+ <option value="/news/2016/05/18/jekyll-3-1-4-released/">Jekyll 3.1.4 "Stability Sam" Released</option>
205
+
206
+ <option value="/news/2016/04/26/jekyll-3-0-5-released/">Jekyll 3.0.5 Released</option>
207
+
208
+ <option value="/news/2016/04/19/jekyll-3-1-3-released/">Jekyll 3.1.3 Released</option>
209
+
210
+ <option value="/news/2016/04/19/jekyll-3-0-4-released/">Jekyll 3.0.4 Released</option>
211
+
212
+ <option value="/news/2016/03/10/making-it-easier-to-contribute-to-jekyll/">Making it easier to contribute to Jekyll</option>
213
+
214
+ <option value="/news/2016/02/19/jekyll-3-1-2-released/">Jekyll 3.1.2 Released!</option>
215
+
216
+ <option value="/news/2016/02/08/jekyll-3-0-3-released/">Jekyll 3.0.3 Released</option>
217
+
218
+ <option value="/news/2016/01/28/jekyll-3-1-1-released/">Jekyll 3.1.1 Released</option>
219
+
220
+ <option value="/news/2016/01/24/jekyll-3-1-0-released/">Jekyll 3.1.0 Released</option>
221
+
222
+ <option value="/news/2016/01/20/jekyll-3-0-2-released/">Jekyll 3.0.2 Released</option>
223
+
224
+ <option value="/news/2015/11/17/jekyll-3-0-1-released/">Jekyll 3.0.1 Released</option>
225
+
226
+ <option value="/news/2015/10/26/jekyll-3-0-released/">Jekyll 3.0 Released</option>
227
+
228
+ <option value="/news/2015/02/26/introducing-jekyll-talk/">Join the Discussion at Jekyll Talk</option>
229
+
230
+ <option value="/news/2015/01/24/jekyll-3-0-0-beta1-released/">Jekyll 3.0.0.beta1 Released</option>
231
+
232
+ <option value="/news/2015/01/20/jekyll-meet-and-greet/">Jekyll Meet &amp; Greet at GitHub HQ</option>
233
+
234
+ <option value="/news/2014/12/22/jekyll-2-5-3-released/">Jekyll Release for the Holidays! v2.5.3 Out</option>
235
+
236
+ <option value="/news/2014/12/17/alfredxing-welcome-to-jekyll-core/">Alfred Xing has joined the Jekyll core team</option>
237
+
238
+ <option value="/news/2014/11/12/jekyll-2-5-2-released/">Jekyll 2.5.2 Released</option>
239
+
240
+ <option value="/news/2014/11/09/jekyll-2-5-1-released/">Jekyll 2.5.1 Released</option>
241
+
242
+ <option value="/news/2014/11/05/jekylls-midlife-crisis-jekyll-turns-2-5-0/">Jekyll's Mid-Life Crisis (Or, Jekyll turns 2.5.0)</option>
243
+
244
+ <option value="/news/2014/09/09/jekyll-2-4-0-released/">A Wild Jekyll 2.4.0 Appeared!</option>
245
+
246
+ <option value="/news/2014/08/10/jekyll-2-3-0-released/">Jekyll 2.3.0 Released</option>
247
+
248
+ <option value="/news/2014/07/29/jekyll-2-2-0-released/">Jekyll 2.2.0 Released</option>
249
+
250
+ <option value="/news/2014/07/01/jekyll-2-1-1-released/">Jekyll 2.1.1 Released</option>
251
+
252
+ <option value="/news/2014/06/28/jekyll-turns-21-i-mean-2-1-0/">Jekyll Turns 21! Err... I mean 2.1.0.</option>
253
+
254
+ <option value="/news/2014/06/04/jekyll-stickers-1-dollar-stickermule/">Pick Up your $1 Jekyll Sticker</option>
255
+
256
+ <option value="/news/2014/05/08/jekyll-2-0-3-released/">Jekyll 2.0.3 Released</option>
257
+
258
+ <option value="/news/2014/05/06/jekyll-turns-2-0-0/">Jekyll turns 2.0.0</option>
259
+
260
+ <option value="/news/2014/03/27/jekyll-1-5-1-released/">Jekyll 1.5.1 Released</option>
261
+
262
+ <option value="/news/2014/03/24/jekyll-1-5-0-released/">Jekyll 1.5.0 Released</option>
263
+
264
+ <option value="/news/2014/01/13/jekyll-1-4-3-released/">Jekyll 1.4.3 Released</option>
265
+
266
+ <option value="/news/2013/12/16/jekyll-1-4-2-released/">Jekyll 1.4.2 Released</option>
267
+
268
+ <option value="/news/2013/12/09/jekyll-1-4-1-released/">Jekyll 1.4.1 Released</option>
269
+
270
+ <option value="/news/2013/12/07/jekyll-1-4-0-released/">Jekyll 1.4.0 Released</option>
271
+
272
+ <option value="/news/2013/11/26/jekyll-1-3-1-released/">Jekyll 1.3.1 Released</option>
273
+
274
+ <option value="/news/2013/11/04/jekyll-1-3-0-released/">Jekyll 1.3.0 Released</option>
275
+
276
+ <option value="/news/2013/10/28/jekyll-1-3-0-rc1-released/">Jekyll 1.3.0.rc1 Released</option>
277
+
278
+ <option value="/news/2013/09/14/jekyll-1-2-1-released/">Jekyll 1.2.1 Released</option>
279
+
280
+ <option value="/news/2013/09/06/jekyll-1-2-0-released/">Jekyll 1.2.0 Released</option>
281
+
282
+ <option value="/news/2013/07/25/jekyll-1-1-2-released/">Jekyll 1.1.2 Released</option>
283
+
284
+ <option value="/news/2013/07/25/jekyll-1-0-4-released/">Jekyll 1.0.4 Released</option>
285
+
286
+ <option value="/news/2013/07/24/jekyll-1-1-1-released/">Jekyll 1.1.1 Released</option>
287
+
288
+ <option value="/news/2013/07/14/jekyll-1-1-0-released/">Jekyll 1.1.0 Released</option>
289
+
290
+ <option value="/news/2013/06/07/jekyll-1-0-3-released/">Jekyll 1.0.3 Released</option>
291
+
292
+ <option value="/news/2013/05/12/jekyll-1-0-2-released/">Jekyll 1.0.2 Released</option>
293
+
294
+ <option value="/news/2013/05/08/jekyll-1-0-1-released/">Jekyll 1.0.1 Released</option>
295
+
296
+ <option value="/news/2013/05/05/jekyll-1-0-0-released/">Jekyll 1.0.0 Released</option>
297
+
298
+ </optgroup>
299
+ </select>
300
+ </div>
301
+
302
+
303
+ <div class="unit four-fifths">
304
+ <article>
305
+ <h2>
306
+ Security Fixes for series 3.6, 3.7 and 3.8
307
+ <a href="/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/" class="header-link" title="Permalink">
308
+ <span class="sr-only">Permalink</span>
309
+ <i class="fa fa-link"></i>
310
+ </a>
311
+ </h2>
312
+ <span class="post-category">
313
+ <span class="label">
314
+ release
315
+ </span>
316
+ </span>
317
+ <div class="post-meta">
318
+ <span class="post-date">
319
+ 19 Sep 2018
320
+ </span>
321
+
322
+ <a href="https://github.com/ashmaroli" class="post-author">
323
+ <img class="avatar avatar-small" alt="ashmaroli" width="24" height="24" data-proofer-ignore="true" src="https://avatars0.githubusercontent.com/ashmaroli?v=3&amp;s=24" srcset="https://avatars0.githubusercontent.com/ashmaroli?v=3&amp;s=24 1x, https://avatars0.githubusercontent.com/ashmaroli?v=3&amp;s=48 2x, https://avatars0.githubusercontent.com/ashmaroli?v=3&amp;s=72 3x, https://avatars0.githubusercontent.com/ashmaroli?v=3&amp;s=96 4x">
324
+ ashmaroli
325
+ </a>
326
+ </div>
327
+ <div class="post-content">
328
+ <p>Hi Jekyllers,</p>
329
+
330
+ <p>We have patched a <strong>critical vulnerability</strong> reported to GitHub a couple of weeks ago and have released a set of new gems to
331
+ bring that patch to you. The vulnerability allowed arbitrary file reads with the cunning use of the <code class="highlighter-rouge">include:</code> setting in the
332
+ config file.</p>
333
+
334
+ <p>By simply including a symlink in the <code class="highlighter-rouge">include</code> array allowed the symlinked file to be read into the build when they shouldn’t
335
+ actually be read in any circumstance.  
336
+ Further details regarding the patch can be viewed at the <a href="https://github.com/jekyll/jekyll/pull/7224">pull request URL</a></p>
337
+
338
+ <p>The patch has been released as versions <code class="highlighter-rouge">3.6.3</code>, <code class="highlighter-rouge">3.7.4</code> and <code class="highlighter-rouge">3.8.4</code>.  
339
+ Thanks to <a href="https://github.com/parkr" class="user-mention">@parkr</a> <code class="highlighter-rouge">v3.7.4</code> was released a couple of weeks prior and has been bundled with <code class="highlighter-rouge">github-pages-v192</code>.</p>
340
+
341
+ <p>Please keep in mind that this issue affects <em>all previously released Jekyll versions</em>. If you have not had
342
+ a good reason to upgrade to <code class="highlighter-rouge">3.6</code>, <code class="highlighter-rouge">3.7</code> or <code class="highlighter-rouge">3.8</code> yet, we advise that you do so at the earliest.</p>
343
+
344
+ <p>As always, Happy Jekylling! <img class="emoji" title=":sparkles:" alt=":sparkles:" src="https://github.githubassets.com/images/icons/emoji/unicode/2728.png" height="20" width="20"></p>
345
+
346
+ </div>
347
+ </article>
348
+
349
+ </div>
350
+
351
+ <div class="unit one-fifth hide-on-mobiles">
352
+ <aside>
353
+ <ul>
354
+ <li>
355
+ <a href="/news/">All News</a>
356
+ </li>
357
+ <li>
358
+ <a href="/news/releases/">Jekyll Releases</a>
359
+ </li>
360
+ </ul>
361
+ <h4>Recent Releases</h4>
362
+ <ul>
363
+
364
+ <li>
365
+ <a href="/news/2019/08/20/jekyll-4-0-0-released/">Version 4.0.0</a>
366
+ </li>
367
+
368
+ <li>
369
+ <a href="/news/2019/08/04/jekyll-4-0-0-pre-beta1-released/">Version 4.0.0.pre.beta1</a>
370
+ </li>
371
+
372
+ <li>
373
+ <a href="/news/2019/07/02/jekyll-3-8-6-released/">Version 3.8.6</a>
374
+ </li>
375
+
376
+ <li>
377
+ <a href="/news/2019/03/18/jekyll-4-0-0-pre-alpha1-released/">Version 4.0.0.pre.alpha1</a>
378
+ </li>
379
+
380
+ <li>
381
+ <a href="/news/2018/11/04/jekyll-3-8-5-released/">Version 3.8.5</a>
382
+ </li>
383
+
384
+ <li>
385
+ <a href="/docs/history/">History »</a>
386
+ </li>
387
+ </ul>
388
+ <h4>Other News</h4>
389
+ <ul>
390
+
391
+
392
+
393
+
394
+
395
+
396
+
397
+
398
+
399
+
400
+
401
+
402
+
403
+
404
+ <li>
405
+ <a href="/news/2018/08/01/jekyll-sponsoring/">Sponsoring Jekyll's development</a>
406
+ </li>
407
+
408
+
409
+
410
+
411
+
412
+
413
+
414
+
415
+
416
+ <li>
417
+ <a href="/news/2018/04/19/development-update/">Jekyll 4.0 is on the Horizon!</a>
418
+ </li>
419
+
420
+
421
+
422
+
423
+
424
+
425
+
426
+ <li>
427
+ <a href="/news/2018/02/19/meet-jekyll-s-new-lead-developer/">Meet Jekyll's New Lead Developer</a>
428
+ </li>
429
+
430
+
431
+
432
+
433
+
434
+
435
+
436
+
437
+
438
+ <li>
439
+ <a href="/news/2017/10/19/diversity-open-source/">Diversity in Open Source, and Jekyll's role in it</a>
440
+ </li>
441
+
442
+
443
+
444
+
445
+
446
+
447
+
448
+
449
+
450
+
451
+
452
+
453
+
454
+
455
+
456
+
457
+
458
+
459
+
460
+
461
+
462
+
463
+
464
+ <li>
465
+ <a href="/news/2016/08/24/jekyll-admin-initial-release/">Jekyll Admin Initial Release</a>
466
+ </li>
467
+
468
+
469
+
470
+
471
+
472
+
473
+
474
+ <li>
475
+ <a href="/news/2016/06/03/update-on-jekyll-s-google-summer-of-code-projects/">Jekyll's Google Summer of Code Project: The CMS You Always Wanted</a>
476
+ </li>
477
+
478
+
479
+
480
+
481
+
482
+
483
+
484
+
485
+
486
+
487
+
488
+
489
+
490
+
491
+
492
+ <li>
493
+ <a href="/news/2016/03/10/making-it-easier-to-contribute-to-jekyll/">Making it easier to contribute to Jekyll</a>
494
+ </li>
495
+
496
+
497
+
498
+
499
+
500
+
501
+
502
+
503
+
504
+
505
+
506
+
507
+
508
+
509
+
510
+
511
+
512
+ <li>
513
+ <a href="/news/2015/02/26/introducing-jekyll-talk/">Join the Discussion at Jekyll Talk</a>
514
+ </li>
515
+
516
+
517
+
518
+
519
+
520
+ <li>
521
+ <a href="/news/2015/01/20/jekyll-meet-and-greet/">Jekyll Meet &amp; Greet at GitHub HQ</a>
522
+ </li>
523
+
524
+
525
+
526
+
527
+
528
+ <li>
529
+ <a href="/news/2014/12/17/alfredxing-welcome-to-jekyll-core/">Alfred Xing has joined the Jekyll core team</a>
530
+ </li>
531
+
532
+
533
+
534
+
535
+
536
+
537
+
538
+
539
+
540
+
541
+
542
+
543
+
544
+
545
+
546
+
547
+
548
+
549
+
550
+ <li>
551
+ <a href="/news/2014/06/04/jekyll-stickers-1-dollar-stickermule/">Pick Up your $1 Jekyll Sticker</a>
552
+ </li>
553
+
554
+
555
+
556
+
557
+
558
+
559
+
560
+
561
+
562
+
563
+
564
+
565
+
566
+
567
+
568
+
569
+
570
+
571
+
572
+
573
+
574
+
575
+
576
+
577
+
578
+
579
+
580
+
581
+
582
+
583
+
584
+
585
+
586
+
587
+
588
+
589
+
590
+
591
+
592
+
593
+
594
+
595
+
596
+
597
+ </ul>
598
+ </aside>
599
+ </div>
600
+
601
+
602
+ <div class="clear"></div>
603
+
604
+ </div>
605
+ </section>
606
+
607
+
608
+ <footer>
609
+ <div class="grid">
610
+ <div class="unit one-third center-on-mobiles">
611
+ <p>Jekyll is lovingly maintained by the <a href="/team/">core team</a> of volunteers. </p>
612
+ <p>The contents of this website are <br>© 2019 under the terms of the <a href="https://github.com/jekyll/jekyll/blob/master/LICENSE">MIT License</a>.</p>
613
+ </div>
614
+ <div class="unit two-thirds align-right center-on-mobiles">
615
+ <p>
616
+ Proudly hosted by
617
+ <a href="https://github.com">
618
+ <img src="/img/footer-logo.png" width="100" height="30" alt="GitHub • Social coding">
619
+ </a>
620
+ </p>
621
+ </div>
622
+ <div class="unit two-thirds align-right center-on-mobiles">
623
+ <p>
624
+ Jekyll is funded thanks to its
625
+ <a href="https://github.com/jekyll/jekyll#sponsors">
626
+ sponsors!
627
+ </a>
628
+ </p>
629
+ </div>
630
+ </div>
631
+ </footer>
632
+
633
+ <script>
634
+ var anchorForId = function (id) {
635
+ var anchor = document.createElement("a");
636
+ anchor.className = "header-link";
637
+ anchor.href = "#" + id;
638
+ anchor.innerHTML = "<span class=\"sr-only\">Permalink</span><i class=\"fa fa-link\"></i>";
639
+ anchor.title = "Permalink";
640
+ return anchor;
641
+ };
642
+
643
+ var linkifyAnchors = function (level, containingElement) {
644
+ var headers = containingElement.getElementsByTagName("h" + level);
645
+ for (var h = 0; h < headers.length; h++) {
646
+ var header = headers[h];
647
+
648
+ if (typeof header.id !== "undefined" && header.id !== "") {
649
+ header.appendChild(anchorForId(header.id));
650
+ }
651
+ }
652
+ };
653
+
654
+ document.onreadystatechange = function () {
655
+ if (this.readyState === "complete") {
656
+ var contentBlock = document.getElementsByClassName("docs")[0] || document.getElementsByClassName("news")[0];
657
+ if (!contentBlock) {
658
+ return;
659
+ }
660
+ for (var level = 1; level <= 6; level++) {
661
+ linkifyAnchors(level, contentBlock);
662
+ }
663
+ }
664
+ };
665
+ </script>
666
+
667
+
668
+ <!-- Google Analytics (https://www.google.com/analytics) -->
669
+ <script>
670
+ !function(j,e,k,y,l,L){j.GoogleAnalyticsObject=y,j[y]||(j[y]=function(){
671
+ (j[y].q=j[y].q||[]).push(arguments)}),j[y].l=+new Date,l=e.createElement(k),
672
+ L=e.getElementsByTagName(k)[0],l.src='https://www.google-analytics.com/analytics.js',
673
+ L.parentNode.insertBefore(l,L)}(window,document,'script','ga');
674
+
675
+ ga('create', 'UA-50755011-1', 'jekyllrb.com');
676
+ ga('send', 'pageview');
677
+
678
+ </script>
679
+
680
+
681
+ <script type="text/javascript" src="https://cdn.jsdelivr.net/npm/docsearch.js@2/dist/cdn/docsearch.min.js"></script>
682
+ <script type="text/javascript"> docsearch({
683
+ apiKey: '50fe39c839958dfad797000f33e2ec17',
684
+ indexName: 'jekyllrb',
685
+ inputSelector: '#docsearch-input',
686
+ enhancedSearchInput: true,
687
+ debug: false // Set debug to true if you want to inspect the dropdown
688
+ });
689
+ </script>
690
+
691
+ </body>
692
+ </html>