Appendix C. AsciiDoc Safe Mode

AsciiDoc safe mode skips potentially dangerous scripted sections in AsciiDoc source files by inhibiting the execution of arbitrary code or the inclusion of arbitrary files.

The safe mode is disabled by default, it can be enabled with the asciidoc(1) --safe command-line option.

Safe mode constraints


The safe mode is not designed to protect against unsafe AsciiDoc configuration files. Be especially careful when:

  1. Implementing filters.
  2. Implementing elements that don’t escape special characters.
  3. Accepting configuration files from untrusted sources.