# \#security

**URL:** https://discourse.gohugo.io/tag/security/71.md

[Latest](https://discourse.gohugo.io/latest.md) · [Categories](https://discourse.gohugo.io/categories.md) · [Tags](https://discourse.gohugo.io/tags.md)

---

## [Security error with the new 0.161.0 security for PostCSS](https://discourse.gohugo.io/t/security-error-with-the-new-0-161-0-security-for-postcss/57186)

<div class="topic-metadata">

**Author:** [@divinerites](https://discourse.gohugo.io/u/divinerites)\
**Replies:** 18\
**Last updated:** [June 30, 2026, 10:01am UTC](https://discourse.gohugo.io/t/security-error-with-the-new-0-161-0-security-for-postcss/57186 "2026-06-30T10:01:20Z")

</div>

Upgrading with 0.161.1 i get an error obviously related to new security in 0.161.0. But despite reading and trying to understand the advice in the release doc, I just fail to understand what i have to do (in security.no…

---

## [Adding audio/mpeg to mediaTypes allowlist does not seem to work](https://discourse.gohugo.io/t/adding-audio-mpeg-to-mediatypes-allowlist-does-not-seem-to-work/50208)

<div class="topic-metadata">

**Author:** [@CamilleScholtz](https://discourse.gohugo.io/u/CamilleScholtz)\
**Replies:** 6\
**Last updated:** [June 8, 2024, 5:25pm UTC](https://discourse.gohugo.io/t/adding-audio-mpeg-to-mediatypes-allowlist-does-not-seem-to-work/50208 "2024-06-08T17:25:17Z")

</div>

Trying to download an mp3 file using GetRemote I get the following error: ERROR Unable to get remote resource http://127.0.0.1:8000/storage/articles/popper-een-afrekening/53d5e6ae-c841-4d06-a0b9-401bfe3cdc74.mp3: error …

---

## [How to prevent identity exposure in the generated website?](https://discourse.gohugo.io/t/how-to-prevent-identity-exposure-in-the-generated-website/43897)

<div class="topic-metadata">

**Author:** [@jonathon\_ayers](https://discourse.gohugo.io/u/jonathon_ayers)\
**Replies:** 1\
**Last updated:** [April 14, 2023, 6:09am UTC](https://discourse.gohugo.io/t/how-to-prevent-identity-exposure-in-the-generated-website/43897 "2023-04-14T06:09:12Z")

</div>

Does the generated website in the public/ directory has any info that can expose my identity ? How can i prevent my identity leak if i am creating a simple blog on Tor network ?

---

## [Git not finding the CAFile](https://discourse.gohugo.io/t/git-not-finding-the-cafile/38303)

<div class="topic-metadata">

**Author:** [@fnurkla](https://discourse.gohugo.io/u/fnurkla)\
**Replies:** 5\
**Last updated:** [April 21, 2022, 8:40pm UTC](https://discourse.gohugo.io/t/git-not-finding-the-cafile/38303 "2022-04-21T20:40:02Z")

</div>

I’m having some trouble “getting” hugo modules with hugo mod get. I get the following error when I run the command: WARN 2022/04/21 21:33:07 module "gitlab.com/kaushalmodi/hugo-theme-refined" not found; either add it as…

---

## [Can't use remote theme repositories after v0.91.1](https://discourse.gohugo.io/t/cant-use-remote-theme-repositories-after-v0-91-1/37397)

<div class="topic-metadata">

**Author:** [@onion](https://discourse.gohugo.io/u/onion)\
**Replies:** 4\
**Last updated:** [March 1, 2022, 4:25am UTC](https://discourse.gohugo.io/t/cant-use-remote-theme-repositories-after-v0-91-1/37397 "2022-03-01T04:25:38Z")

</div>

I have a private Hugo theme repository on GitHub that multiple sites share which has been working well before recent updates. So far I have been able to do this by replacing the git URL in my git config locally, along w…

---

## [0.91.0: \`process.env.VARIABLE\` no longer available from postcss](https://discourse.gohugo.io/t/0-91-0-process-env-variable-no-longer-available-from-postcss/37090)

<div class="topic-metadata">

**Author:** [@regis](https://discourse.gohugo.io/u/regis)\
**Replies:** 5\
**Last updated:** [February 10, 2022, 11:33pm UTC](https://discourse.gohugo.io/t/0-91-0-process-env-variable-no-longer-available-from-postcss/37090 "2022-02-10T23:33:29Z")

</div>

Since v0.91.0, process.env is no longer available from tailwind.config.js processed by Hugo Pipes: the following: typeof process.env.HUGO\_ENV !== "undefined" Systematically returns false. Could it be be because of the…

---

## [Hugo mod failing in v0.91.1 but works in v0.91.0](https://discourse.gohugo.io/t/hugo-mod-failing-in-v0-91-1-but-works-in-v0-91-0/36180)

<div class="topic-metadata">

**Author:** [@techmagus](https://discourse.gohugo.io/u/techmagus)\
**Replies:** 7\
**Last updated:** [December 23, 2021, 12:02pm UTC](https://discourse.gohugo.io/t/hugo-mod-failing-in-v0-91-1-but-works-in-v0-91-0/36180 "2021-12-23T12:02:52Z")

</div>

Hi, I’m stumped with this one, only 1 project I have is affected. Here are the details. When using the following commands: hugo mod get -u hugo mod get -u ./... hugo mod vendor It is failing with the following errors…

---

## [Error with Preview Site](https://discourse.gohugo.io/t/error-with-preview-site/36146)

<div class="topic-metadata">

**Author:** [@dvo](https://discourse.gohugo.io/u/dvo)\
**Replies:** 3\
**Last updated:** [December 21, 2021, 11:16pm UTC](https://discourse.gohugo.io/t/error-with-preview-site/36146 "2021-12-21T23:16:56Z")

</div>

Hi - I am trying to set up my first hugo site through and am following a guide. One of the initial steps is to run the following code: new\_site(theme = “wowchemy/starter-academic”) … Which then asks me to preview t…

---

## [Possible bug: /config/\_default/security.toml is ignored](https://discourse.gohugo.io/t/possible-bug-config-default-security-toml-is-ignored/36104)

<div class="topic-metadata">

**Author:** [@techmagus](https://discourse.gohugo.io/u/techmagus)\
**Replies:** 2\
**Last updated:** [December 17, 2021, 10:55pm UTC](https://discourse.gohugo.io/t/possible-bug-config-default-security-toml-is-ignored/36104 "2021-12-17T22:55:55Z")

</div>

I use Pandoc in one of my sites and also I am using the /config/ method. In /config/\_default/ folder: create: security.toml the content: enableInlineShortcodes = false \[security.exec\] allow = \['^dart-sass-embedded$…