I’ve added a page to Hugo’s documentation about Hugo’s security model:
6 Likes
Hugo will soon introduce a concept of Content Source Plugins (AKA Pages from Data ), but the above will still hold true.
I’m sure there was something in there about run-time security… 