Only allow CWD _layouts outside of safe mode.

2026-01-30 17:28:29 -05:00 · 2014-10-21 09:00:41 -07:00
parent 0c6137b2d3
commit ca40c771d0
1 changed files with 1 additions and 1 deletions
--- a/lib/jekyll/layout_reader.rb
+++ b/lib/jekyll/layout_reader.rb
@@ -43,7 +43,7 @@ module Jekyll

    def layout_directory_in_cwd
      dir = Jekyll.sanitized_path(Dir.pwd, site.config['layouts'])
-      if File.directory?(dir)
+      if File.directory?(dir) && !site.safe
        dir
      else
        nil