bridgetownrb/bridgetown-feed

🚨 Major data leak with Liquid 5.5

jaredcwhite opened this issue · 1 comments

There seems to be some kind of bizarre data leakage with Liquid 5.5. The site.collections hash ends up with a context key that's a Liquid::Context object, which can crash a site build. I'm not yet sure why this is happening, only that on Bridgetown sites which use this feed plugin and have upgraded to Liquid 5.5, everything goes haywire.

This is actually a problem even with stock Bridgetown sites using Liquid templates, so there's a problem with Liquid 5.5 in general. I'm releasing a Bridgetown patch to lock the Liquid gem to 5.4. To be revisited at a later date…