bunto / bunto-assets

:art: Asset pipelines for Bunto.

Bunto is a Web Application Framework which can be used as a simple, static site generator for personal, project, or organization sites.

Linux	OS X	Windows	Hakiri	CodeShip	RubyGems	Gemnasium	CLA

By Suriyaa Kudo, Tom Preston-Werner, Parker Moore and many awesome contributors!

Bunto is a Web Application Framework and can be used as a simple, blog-aware, static site generator perfect for personal, project, or organization sites. Think of it like a file-based CMS, without all the complexity. Bunto takes your content, renders Markdown and Liquid templates, and spits out a complete, static website ready to be served by Apache, Nginx or another web server. Bunto is the engine behind GitHub Pages, which you can use to host sites right from your GitHub repositories.

Philosophy

Bunto does what you tell it to do — no more, no less. It doesn't try to outsmart users by making bold assumptions, nor does it burden them with needless complexity and configuration. Put simply, Bunto gets out of your way and allows you to concentrate on what truly matters: your content.

Having trouble with OS X El Capitan?

See: https://buntowaf.tk/docs/troubleshooting/#bunto-amp-mac-os-x-1011

Getting Started

• Install the gem
• Read up about its Usage and Configuration
• Take a gander at some existing Sites
• Fork and Contribute your own modifications
• Have questions? Check out our official forum community Bunto Talk or #bunto on irc.freenode.net

Code of Conduct

In order to have a more open and welcoming community, Bunto adheres to a code of conduct adapted from the Ruby on Rails code of conduct.

Please adhere to this code of conduct in any interactions you have in the Bunto community. It is strictly enforced on all official Bunto repositories, websites, and resources. If you encounter someone violating these terms, please let the maintainer (@SuriyaaKudoIsc) know and he will address it as soon as possible.

Diving In

• Migrate from your previous system
• Learn how the YAML Front Matter works
• Put information on your site with Variables
• Customize the Permalinks your posts are generated with
• Use the built-in Liquid Extensions to make your life easier
• Use custom Plugins to generate content specific to your site

License

See the LICENSE file.

bunto-assets's Issues

TaskLists: bunto-assets (3.0.0)

• Do not merge asset sources if the sources has "_assets" so they can tag.
• Add support for processing text files with Liquid.
• Allow the user to disable merged sources if they wish to.
• Process tag arguments with Liquid, not just values.

OSVDB-126747 in uglifier

Security issue from Hakiri: The upstream library for the Ruby uglifier gem, UglifyJS, is affected by a vulnerability that allows a specially crafted Javascript file to have altered functionality after minification.

This bug, found in UglifyJS versions 2.4.23 and earlier, was demonstrated to allow potentially malicious code to be hidden within secure code, and activated by the minification process.

For more information, consult: https://zyan.scripts.mit.edu/blog/backdooring-js/

See:

• mishoo/UglifyJS#751
• https://hakiri.io/projects/b9cabcd1429b01/stacks/09837afd893a17/builds/c41160a2617f52/warnings?name=Code+Injection
• https://hakiri.io/technologies/uglifier/issues/279911d9720338