Kevin Ansfield
6ddce262be
Fixed v0.1 oembed API tests
...
refs 5efef45dd0
- v0.1 oembed endpoint supported schemaless URLs according to the tests so support was added to the endpoint
- updated the tests to use a valid oembed response
- updated the tests to expect a validation error rather than an internal server error when the remote endpoint is not available
2020-04-07 14:43:53 +01:00
Kevin Ansfield
5efef45dd0
🔒 Improved validation of fetched urls and responses in v2 oembed endpoint
...
no issue
- backports security fixes implemented in https://github.com/TryGhost/Ghost/commit/477393967 from v3 endpoint in Ghost 3.x to the v2 and v0.1 endpoints
2020-04-07 13:40:09 +01:00
Fabien O'Carroll
c4179584e2
Version bump to 2.38.0
2020-01-14 11:05:15 +02:00
Fabien O'Carroll
379a1470b8
Updated Ghost-Admin to 2.38.0
2020-01-14 11:05:15 +02:00
Ian Sim
0cd0ee049e
✨ Allowed pages to accept HTML as a source ( #11422 )
...
refs https://github.com/TryGhost/Ghost/issues/10471
- Allow page resource endpoints to accept HTML source. This behavior is the same as the post's resource introduced with e9ecf70ff7372f395b8917340805148bc764e2ef
- The functionality was most likely missed when post split into posts & pages was happening.
- Added symmetric changes to API v2.
2020-01-09 10:44:46 +01:00
Kevin Ansfield
258027608a
🐛 Fixed 500 error on /rss/ when a post has no content
...
refs https://github.com/TryGhost/Ghost/issues/10679
- this was a regression introduced after extracting our url-utils package
- `urlUtils.htmlRelativeToAbsolute(html)` will return `null` rather than an empty string if `html` is explicitly passed in as `null`
2019-12-18 15:58:27 +00:00
Rish
d964dec839
Version bump to 2.37.2
2019-12-18 15:11:27 +05:30
Rish
5958885e2e
Updated Ghost-Admin to 2.37.2
2019-12-18 15:11:27 +05:30
Fabien O'Carroll
de65a153ce
Fixed duplicate require of common module ( #11471 )
...
no-issue
This was a local change that got forgotten in the previous cherrypick
2019-12-18 11:34:50 +02:00
Fabien O'Carroll
465d1ed040
🐛 Fixed 500 errors for incorrect Origin headers ( #11470 )
...
no-issue
Our function for determining cors options created a new instance of URL
without wrapping it in a try/catch which meant any failures to parse the
URL bubbled down as a 500 error.
500 errors are commonly used for alerting at the infrastructure level,
and this error is definitely one caused by a badly configured client, so
we wrap the construction and crap out with a Bad Request Error (HTTP
400) if it fails.
2019-12-18 11:02:36 +02:00
Rish
96aae6be2f
Version bump to 2.37.1
2019-12-17 20:54:45 +05:30
Rish
d8c9adae69
Updated Ghost-Admin to 2.37.1
2019-12-17 20:54:45 +05:30
Hannah Wolfe
33b3e466fd
Update dependency analytics-node to v3.4.0-beta.1
2019-12-16 21:06:09 +00:00
Hannah Wolfe
0cece0a2cc
Update dependency @tryghost/social-urls to v0.1.5
2019-12-16 20:29:40 +00:00
Hannah Wolfe
69e8413357
Update dependency express-hbs to v2.3.0
2019-12-16 20:14:09 +00:00
Hannah Wolfe
549251de5b
Update dependency gscan to v2.3.1
2019-12-16 19:59:23 +00:00
Nazar Gargol
c34c8e9611
Anchored gscan rules to be checked against v2 rules
...
no issue
- This allows to bump gscan version in the future without breaking changes. The rule set will stay the same across versions
2019-10-16 13:05:51 +02:00
Peter Zimon
9ca367f019
Refined member emails
...
no issues
- refined typography and spacing for member signup, singin and subscribe emails
2019-10-15 13:34:52 +02:00
Renovate Bot
76f7488986
Update dependency @tryghost/social-urls to v0.1.3
2019-10-14 15:28:19 +00:00
Kevin Ansfield
ceb9284cac
Version bump to 2.37.0
2019-10-14 13:50:10 +01:00
Kevin Ansfield
8e2ed1d5b0
Updated Ghost-Admin to 2.37.0
2019-10-14 13:50:10 +01:00
Kevin Ansfield
bc8fc566a7
🐛 Fixed markdown card content appearing corrupted when editing a post
...
refs https://github.com/TryGhost/Ghost/issues/11235
- updates `@tryghost/url-utils` to a version with a fixed `markdownRelativeToAbsolute` method
2019-10-14 13:40:53 +01:00
Rishabh Garg
1e9d4875f5
Added new member subscription settings ( #11240 )
...
no issue
We added 2 new member subscription settings - `allowSelfSignup` and `fromAddress`- with defaults as `true` and `noreply`, this migration sets default values for both settings for users migrating from previous version and cleans up intermediate naming for `allowSelfSignup`.
2019-10-14 16:58:15 +05:30
Nazar Gargol
84d40983d2
Unskipped fixed test
...
no issue
- The test was fixed with 4a10ddc8fa
2019-10-14 12:21:26 +02:00
Renovate Bot
3e15b18bc6
Update dependency @tryghost/members-ssr to v0.7.1
2019-10-14 01:23:54 +00:00
John O'Nolan
29d5fe7c91
Update aggregate download count
2019-10-13 10:59:59 +07:00
Kevin Ansfield
0ee46ab7a8
Updated @tryghost/url-utils to v0.6.9
...
no issue
- contains guards to prevent unnecessary processing of markdown and html
2019-10-12 17:48:54 +01:00
Kevin Ansfield
85a03b19b1
🐛 Fixed errors when saving or importing posts with invalid URLs
...
no issue
- bumped @tryghost/url-utils to a version which catches parsing errors and returns the original url argument
2019-10-11 13:20:24 +01:00
Rish
dc6d768a6d
Version bump to 2.36.0
2019-10-11 16:59:08 +05:30
Rish
0a75921a53
Updated Ghost-Admin to 2.36.0
2019-10-11 16:59:08 +05:30
Rish
cd02fd5c63
Renamed member requirePayment setting
...
no issue
Renames member setting `requirePaymentForSignup` -> `allowSelfSignup` to match members API usage
2019-10-11 14:08:31 +05:30
Fabien O'Carroll
85d83b4f08
Fixed regression test for canary content api
...
no-issue
We now return the visibility field on the content api
2019-10-11 14:14:46 +07:00
Fabien O'Carroll
3eb4427888
Exposed visibility prop for posts on canary api ( #11229 )
...
no-issue
This is required by the theme layer to style member only posts
differently
2019-10-11 13:58:50 +07:00
Fabien O'Carroll
95fa815eb3
Improved settings model tests
...
no-issue
This makes them way less brittle and reliant on correctly indexing an array
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
1500881923
Renamed getRequirePaymentSetting
...
no-issue
The negation before this function call was a little easy to miss for me
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
0c602976c0
Passed members_email_auth_secret to members-api
...
no-issue
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
cbb13904b8
Added members_email_auth_secret setting
...
no-issue
This will be used for signing HS256 JWTs it's a 64 byte (256 bit) hex
string
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
8b0130193c
Installed @tryghost/members-api@0.8.2
...
no-issue
This version uses HS256 signed tokens for magic-links and provides much
smaller links but requires a 256bit (64 byte) secret
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
ef5e6f7e5b
Removed text-transform: capitalize from buttons
...
no-issue
Button text should be sentence case not title case
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
527632f287
Updated members email templates
...
no-issue
These changes fix come colors and styles
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
3062ec7690
Wired up members plaintext emails
...
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
257bebbb39
Wired up the members emails templates
...
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
f4d202d7c5
Added member email templates
...
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
98f27c1c33
Added getSubject function for members emails
...
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
6f160518d1
Ensured that members emails include our text version
...
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
6070ebaf02
Installed @tryghost/members-api@0.8.1
...
no-issue
This includes changes to support custom subjects in emails and access to
the email of the recipient in the getHTML and getText functions
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
b030081a4b
Updated GhostMailer to allow forcing text content
...
no-issue
This is so that we can pass our own customised text content
2019-10-11 11:45:11 +07:00
Naz Gargol
1b04b48ffd
Added from
parameter for member emails ( #11222 )
...
* Added from parameter for member emails
no issue
- Passed in the `from` parameter when initializing members mailer to be able to customize outgoing address
- Extends GhsotMailer to accept a from parameter from the outside
2019-10-11 11:21:53 +07:00
Kevin Ansfield
816bec28c2
Version bump to 2.35.0
2019-10-10 18:18:45 +01:00
Kevin Ansfield
0cc8b019d1
Updated Ghost-Admin to 2.35.0
2019-10-10 18:18:45 +01:00