{"action":"created","issue":{"url":"https://api.github.com/repos/gohugoio/hugo/issues/4060","repository_url":"https://api.github.com/repos/gohugoio/hugo","labels_url":"https://api.github.com/repos/gohugoio/hugo/issues/4060/labels{/name}","comments_url":"https://api.github.com/repos/gohugoio/hugo/issues/4060/comments","events_url":"https://api.github.com/repos/gohugoio/hugo/issues/4060/events","html_url":"https://github.com/gohugoio/hugo/pull/4060","id":271666297,"number":4060,"title":"Add Pandoc support, refactor external helpers","user":{"login":"betaveros","id":3482833,"avatar_url":"https://avatars0.githubusercontent.com/u/3482833?v=4","gravatar_id":"","url":"https://api.github.com/users/betaveros","html_url":"https://github.com/betaveros","followers_url":"https://api.github.com/users/betaveros/followers","following_url":"https://api.github.com/users/betaveros/following{/other_user}","gists_url":"https://api.github.com/users/betaveros/gists{/gist_id}","starred_url":"https://api.github.com/users/betaveros/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/betaveros/subscriptions","organizations_url":"https://api.github.com/users/betaveros/orgs","repos_url":"https://api.github.com/users/betaveros/repos","events_url":"https://api.github.com/users/betaveros/events{/privacy}","received_events_url":"https://api.github.com/users/betaveros/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-11-07T00:12:28Z","updated_at":"2017-11-07T17:17:25Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/gohugoio/hugo/pulls/4060","html_url":"https://github.com/gohugoio/hugo/pull/4060","diff_url":"https://github.com/gohugoio/hugo/pull/4060.diff","patch_url":"https://github.com/gohugoio/hugo/pull/4060.patch"},"body":"Recognize the Pandoc format under the file extension .pandoc or .pdc,\r\nand shell out to pandoc as an external helper to format Pandoc content.\r\n\r\nAdd a configuration option, externalHelperArguments, that can be used to\r\noverride the additional arguments passed to external helpers.\r\n\r\nRefactor out repeated code with external helpers. Change the error\r\noutput formatting. I did not see any of the external helpers print the\r\nstring \"`<input>`\" to represent stdin as a file; just prepending the file\r\nname to error output is more general and doesn't sacrifice that much in\r\nterms of readability."},"comment":{"url":"https://api.github.com/repos/gohugoio/hugo/issues/comments/342555296","html_url":"https://github.com/gohugoio/hugo/pull/4060#issuecomment-342555296","issue_url":"https://api.github.com/repos/gohugoio/hugo/issues/4060","id":342555296,"user":{"login":"bep","id":394382,"avatar_url":"https://avatars1.githubusercontent.com/u/394382?v=4","gravatar_id":"","url":"https://api.github.com/users/bep","html_url":"https://github.com/bep","followers_url":"https://api.github.com/users/bep/followers","following_url":"https://api.github.com/users/bep/following{/other_user}","gists_url":"https://api.github.com/users/bep/gists{/gist_id}","starred_url":"https://api.github.com/users/bep/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bep/subscriptions","organizations_url":"https://api.github.com/users/bep/orgs","repos_url":"https://api.github.com/users/bep/repos","events_url":"https://api.github.com/users/bep/events{/privacy}","received_events_url":"https://api.github.com/users/bep/received_events","type":"User","site_admin":false},"created_at":"2017-11-07T17:17:25Z","updated_at":"2017-11-07T17:17:25Z","author_association":"OWNER","body":"A quick question: Is it a remote possibility to do \"shell injection\" via `os/exec` so I could configure it to do\r\n\r\n```bash\r\npandoc --strip-comments && rm -rf /\r\n```\r\n\r\nIn the above I'm mostly worried about the people on the forum etc. that asks me questions of the type \"can you clone my site and see what the problem is?\" ... If I would start worrying about some malware type of situations, I would stop doing that.\r\n\r\nNote that I would expect the `golang` team to protect against this. But I would like to be really sure."}}
{"actor":{"display_login":"bep"}}