From 67543ce1d62161fdef9dca198289d7dd7dceacc0 Mon Sep 17 00:00:00 2001
From: Simon McVittie <smcv@debian.org>
Date: Sun, 10 Feb 2019 16:30:07 +0000
Subject: useragent: Don't allow non-HTTP protocols to be used

This prevents the aggregate plugin from being used to read the contents
of local files via file:/// URLs.

Signed-off-by: Simon McVittie <smcv@debian.org>
---
 IkiWiki.pm | 1 +
 1 file changed, 1 insertion(+)

(limited to 'IkiWiki.pm')

diff --git a/IkiWiki.pm b/IkiWiki.pm
index dc047b08a..d5d1af56c 100644
--- a/IkiWiki.pm
+++ b/IkiWiki.pm
@@ -2477,6 +2477,7 @@ sub useragent () {
 		cookie_jar => $config{cookiejar},
 		env_proxy => 1,		# respect proxy env vars
 		agent => $config{useragent},
+		protocols_allowed => [qw(http https)],
 	);
 }
 
-- 
cgit v1.2.3