---

id: ebaa1e1e-c386-49b4-92e2-8118a61f9175 title: Reserved index names can overwrite section indexes (releases/issues/pulls/wiki) state: closed labels:

• area:render assignees: [] milestone: null created: 2026-10-27T18:40:11.379047814Z updated: 2026-10-27T19:53:10.490515246Z

---

Problem

Generated index filenames are not reserved. A hostile .forge can overwrite the section index with a detail page:

• release version: index writes releases/index.html (the release list) after the index and replaces it with the release page;
• issue id: index writes issues/index.html after the issues index;
• PR id: index writes pulls/index.html after the pulls index;
• wiki file index (no extension) writes wiki/index.html after the wiki index.

All four are accepted by the current is_safe_segment/is_safe_id checks. Verified with fixtures; e.g. a release named index makes releases/index.html render <h1>Index release</h1> instead of the release table.

Impact

Hostile or accidental metadata silently destroys a section index, its navigation target, and the API/HTML consistency around it. No script injection, but a denial/correctness bug in the generated site.

Fix

Reserve generated names (index) for releases, issue/PR ids, and wiki pages, or write indexes last and reject collisions loudly. Add one fixture covering all four collisions.