feat(FileSystemLoader): Raise when template name escapes base

2016-11-30 15:16:32 +00:00
parent abae80d39d
commit 63c2b935f7
3 changed files with 9 additions and 90 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Stencil Changelog

+## Master
+
+### Enhancements
+
+- `FileSystemLoader` will now ensure that template paths are within the base
+  path. Any template names that try to escape the base path will raise a
+  `SuspiciousFileOperation` error.
+
+
 ## 0.7.1

 ### Bug Fixes