Skip to content

Allow HTML content in Hugo v0.162.0#2120

Merged
travisbeckham merged 1 commit into
mainfrom
travis/security-fix
May 26, 2026
Merged

Allow HTML content in Hugo v0.162.0#2120
travisbeckham merged 1 commit into
mainfrom
travis/security-fix

Conversation

@travisbeckham
Copy link
Copy Markdown
Collaborator

With Hugo v0.162.0, HTML content files are denied by default, resulting in the build failing. A new security.allowContent policy controls which content media types may be used for pages under the /content directory. HTML content can opt back in with security.allowContent: ['.*'].

For reviewers: a new security param has been added, but since we do not build the production site with v0.162.0, this should be a no-op.

…nt files

Signed-off-by: Travis Beckham <travis@buoyant.io>
@travisbeckham travisbeckham requested a review from kflynn May 26, 2026 18:44
Copy link
Copy Markdown
Member

@kflynn kflynn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ship it! 🙂

@travisbeckham travisbeckham merged commit b346e66 into main May 26, 2026
7 checks passed
@travisbeckham travisbeckham deleted the travis/security-fix branch May 26, 2026 18:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants