From 800085d8d5cfc904cda5266814e08e60eabf484d Mon Sep 17 00:00:00 2001 From: Mark Dumay <61946753+markdumay@users.noreply.github.com> Date: Fri, 26 Jun 2026 07:59:01 +0200 Subject: [PATCH] fix(hanko): use markdown media type for profile modal Hugo v0.162.0 added the security.allowContent policy, which denies the text/html content media type by default as XSS hardening. The profile modal shipped as content/_modals/profile.html, so sites consuming this module fail to build on Hugo >= 0.162: access denied: "text/html" is not whitelisted in policy "security.allowContent" Rename the page to .md so it declares the text/markdown media type, which is whitelisted. The {{< ModalProfile >}} shortcode output still passes through verbatim (shortcode placeholders bypass goldmark), so the rendered modal is unchanged. This mirrors the approach mod-flexsearch already uses for its search modal. Co-Authored-By: Claude Opus 4.8 --- content/_modals/{profile.html => profile.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename content/_modals/{profile.html => profile.md} (100%) diff --git a/content/_modals/profile.html b/content/_modals/profile.md similarity index 100% rename from content/_modals/profile.html rename to content/_modals/profile.md