Content not included - allow-uri-read & unsafe

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Content not included - allow-uri-read & unsafe

ch007m
Hi,

Even If I use the attribute :allow-uri-read: (top op the page) and asciidoctor 0.1.4 command  with -S unsafe parameter (asciidoctor -S unsafe gpe-git-repo.ad), the result (HTML) does not include the text from the external web server but shows the link. Is this feature working ?

:allow-uri-read: 
:safe: unsafe

include::https://raw.github.com/asciidoctor/asciidoctor/master/LICENSE[]

Regards,
Charles Moulliard
Apache Committer / Technologist Evangelist / Blogger / MiddleWare Specialist
Twitter : @cmoulliard
Reply | Threaded
Open this post in threaded view
|

Re: Content not included - allow-uri-read & unsafe

ch007m
I wonder why the unit test of 0.1.4 is working (https://github.com/asciidoctor/asciidoctor/blob/v0.1.4/test/reader_test.rb#L502) and not my config ?
Charles Moulliard
Apache Committer / Technologist Evangelist / Blogger / MiddleWare Specialist
Twitter : @cmoulliard
Reply | Threaded
Open this post in threaded view
|

Re: Content not included - allow-uri-read & unsafe

asotobu
I think that mates from Spring Boot has similar issues in https connections, for example if you include the same file but from http it works, but not https from github. It is something that I have to review, but if you find something please share it so we can apply the same  in Spring Boot docs.
Reply | Threaded
Open this post in threaded view
|

Re: Content not included - allow-uri-read & unsafe

mojavelinux
Administrator
The only way to enable uri reads is via the document options, and its disabled by default regardless of safe mode. We can revisit this level of paranoia after 1.5.0.

In your example, you would enable it by invoking:

 $ asciidoctor -a allow-uri-read sample.adoc

For reference, here's the line that controls this setting:


-Dan