1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
community.general/docs/docsite
James Cammarata ed56f51f18 Fixing security issue with lookup returns not tainting the jinja2 environment
CVE-2017-7481

Lookup returns wrap the result in unsafe, however when used through the
standard templar engine, this does not result in the jinja2 environment being
marked as unsafe as a whole. This means the lookup result looses the unsafe
protection and may become simple unicode strings, which can result in bad
things being re-templated.

This also adds a global lookup param and cfg options for lookups to allow
unsafe returns, so users can force the previous (insecure) behavior.
2017-05-08 12:43:46 -05:00
..
_static consolidated docs 2017-01-06 09:16:59 -05:00
_themes/srtd Switch Adobe tracking off staging. 2017-04-17 13:36:31 -07:00
js/ansible consolidated docs 2017-01-06 09:16:59 -05:00
man consolidated docs 2017-01-06 09:16:59 -05:00
rst Fixing security issue with lookup returns not tainting the jinja2 environment 2017-05-08 12:43:46 -05:00
rst_common consolidated docs 2017-01-06 09:16:59 -05:00
.gitignore consolidated docs 2017-01-06 09:16:59 -05:00
.nojekyll consolidated docs 2017-01-06 09:16:59 -05:00
favicon.ico consolidated docs 2017-01-06 09:16:59 -05:00
jinja2-2.9.6.inv Enable intersphinx for python stdlib and jinja2 2017-04-25 12:26:40 -07:00
keyword_desc.yml moved docs generation and templates to docs/ 2017-03-24 15:52:36 -04:00
Makefile added epub entry for makefile 2017-05-01 13:41:04 -04:00
Makefile.sphinx Use correct path for docsite src (rst/) 2017-01-13 18:14:33 -05:00
modules.js consolidated docs 2017-01-06 09:16:59 -05:00
python2-2.7.13.inv Enable intersphinx for python stdlib and jinja2 2017-04-25 12:26:40 -07:00
python3-3.6.1.inv Enable intersphinx for python stdlib and jinja2 2017-04-25 12:26:40 -07:00
README.md consolidated docs 2017-01-06 09:16:59 -05:00
variables.dot consolidated docs 2017-01-06 09:16:59 -05:00

Homepage and documentation source for Ansible

This project hosts the source behind docs.ansible.com

Contributions to the documentation are welcome. To make changes, submit a pull request that changes the reStructuredText files in the "rst/" directory only, and the core team can do a docs build and push the static files.

If you wish to verify output from the markup such as link references, you may install sphinx and build the documentation by running make viewdocs from the ansible/docsite directory.

To include module documentation you'll need to run make webdocs at the top level of the repository. The generated html files are in docsite/htmlout/.

If you do not want to learn the reStructuredText format, you can also file issues about documentation problems on the Ansible GitHub project.

Note that module documentation can actually be generated from a DOCUMENTATION docstring in the modules directory, so corrections to modules written as such need to be made in the module source, rather than in docsite source.

To install sphinx and the required theme, install pip and then "pip install sphinx sphinx_rtd_theme"