AsciiDoc safe mode skips potentially dangerous scripted sections in AsciiDoc source files by inhibiting the execution of arbitrary code or the inclusion of arbitrary files.
The safe mode is disabled by default, it can be enabled with the
asciidoc(1)
--safe
command-line option.
Safe mode constraints
eval
, sys
and sys2
executable attributes and block macros are
not executed.
include::<filename>[]
and include1::<filename>[]
block macro
files must reside inside the parent file’s directory.
{include:<filename>}
executable attribute files must reside
inside the source document directory.
The safe mode is not designed to protect against unsafe AsciiDoc configuration files. Be especially careful when:
|