security

type AccessDeniedError struct {
	// contains filtered or unexported fields
}

type Config struct {
	// Restricts access to os.Exec....
	// <docsmeta>{ "newIn": "0.91.0" }</docsmeta>
	Exec Exec `json:"exec"`

	// Restricts access to certain template funcs.
	Funcs Funcs `json:"funcs"`

	// Restricts access to resources.GetRemote, getJSON, getCSV.
	HTTP HTTP `json:"http"`

	// Node holds Node.js security settings, e.g. --permissions flag
	Node Node `json:"node"`

	// Allow inline shortcodes
	EnableInlineShortcodes bool `json:"enableInlineShortcodes"`
}

type Exec struct {
	Allow Whitelist `json:"allow"`
	OsEnv Whitelist `json:"osEnv"`
}

type Funcs struct {
	// OS env keys allowed to query in os.Getenv.
	Getenv Whitelist `json:"getenv"`
}

type HTTP struct {
	// URLs to allow in remote HTTP (resources.Get, getJSON, getCSV).
	URLs Whitelist `json:"urls"`

	// HTTP methods to allow.
	Methods Whitelist `json:"methods"`

	// Media types where the Content-Type in the response is used instead of resolving from the file content.
	MediaTypes Whitelist `json:"mediaTypes"`
}

type Node struct {
	// Permissions configures --permissions flag inside npx's --node-options
	Permissions NodePermissions `json:"permissions"`
}

type NodePermissions struct {
	// Disable turns off the Node.js permission model entirely.
	Disable     bool     `json:"disable"`
	AllowRead   []string `json:"allowRead"`
	AllowWrite  []string `json:"allowWrite"`
	AllowAddons []string `json:"allowAddons"`
	AllowWorker []string `json:"allowWorker"`
}

type Whitelist struct {
	// contains filtered or unexported fields
}