stupid github pages and their jekyll plugin security