bdeshi/khosra
0
0
Fork 0
Code Issues Pull Requests Releases Activity

include another file from the bundle, one level deep

Browse Source 
{{< include file="notes.md" >}} renders a file from the bundle as Markdown in
place. The included file is converted by the same goldmark instance that is
rendering the page — handed to the transformer in Extend — so its configuration
can never drift from the page's.

Three properties, each tested:

A name containing ".." is refused. os.Root would stop a path leaving the site
root, but path.Join collapses ".." long before the filesystem sees it, so without
this an include could read a template or a stray dotfile from the site root and
publish it. Verified the test fails without the guard: it took three levels of
".." from content/pages/d to reach the root, and the first version of the test
used two, so it passed either way and proved nothing.

An include inside an included file renders nothing and logs. The nested parse is
marked, so one level is all there is and a file including itself is a log line
rather than a stack overflow (ADR-0038, ADR-0029).

A gallery inside an included file still resolves, because the nested parse carries
the same Origin.

The node gained `content` for output a feature produced itself, plus `isContent`
so a failed include renders nothing instead of falling through to a fragment
lookup and complaining about a template that was never meant to exist.
This commit is contained in:
Claude Opus 5
2026-07-31 02:00:39 +06:00
committed by bdeshi
parent bad1b36f77
commit 2041c43b70
8 changed files with 215 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/extensions.md
+1 -1
View File
@@ -63,7 +63,7 @@ wearing a disguise.
| Phase | Operates on | Examples |
|---|---|---|
| `PhaseLoad` | raw bytes + frontmatter | includes, translation fallback |
| `PhaseLoad` | raw bytes + frontmatter | translation fallback. *Not* includes: they turned out to be parse-phase, because splicing another file's parsed nodes into a page is invalid rather than merely awkward (ADR-0038) |
| `PhaseParse` | the parsed Markdown tree | shortcodes, transclusion, image derivatives |
| `PhaseMarkup` | rendered HTML fragments, code spans skipped | widows. Smart quotes and dashes turned out to be a Markdown parser option, and chrome localisation a template function (ADR-0034) — neither needed a phase |
| `PhasePage` | the assembled page object | OpenGraph, JSON-LD, related posts, series nav |