0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-17 23:44:39 -05:00
Commit graph

9893 commits

Author SHA1 Message Date
Kevin Ansfield
6ddce262be Fixed v0.1 oembed API tests
refs 5efef45dd0

- v0.1 oembed endpoint supported schemaless URLs according to the tests so support was added to the endpoint
- updated the tests to use a valid oembed response
- updated the tests to expect a validation error rather than an internal server error when the remote endpoint is not available
2020-04-07 14:43:53 +01:00
Kevin Ansfield
5efef45dd0 🔒 Improved validation of fetched urls and responses in v2 oembed endpoint
no issue

- backports security fixes implemented in https://github.com/TryGhost/Ghost/commit/477393967 from v3 endpoint in Ghost 3.x to the v2 and v0.1 endpoints
2020-04-07 13:40:09 +01:00
Fabien O'Carroll
c4179584e2 Version bump to 2.38.0 2020-01-14 11:05:15 +02:00
Fabien O'Carroll
379a1470b8 Updated Ghost-Admin to 2.38.0 2020-01-14 11:05:15 +02:00
Ian Sim
0cd0ee049e Allowed pages to accept HTML as a source (#11422)
refs https://github.com/TryGhost/Ghost/issues/10471

- Allow page resource endpoints to accept HTML source. This behavior is the same as the post's resource introduced with e9ecf70ff7372f395b8917340805148bc764e2ef
- The functionality was most likely missed when post split into posts & pages was happening.
- Added symmetric changes to API v2.
2020-01-09 10:44:46 +01:00
Kevin Ansfield
258027608a 🐛 Fixed 500 error on /rss/ when a post has no content
refs https://github.com/TryGhost/Ghost/issues/10679

- this was a regression introduced after extracting our url-utils package
- `urlUtils.htmlRelativeToAbsolute(html)` will return `null` rather than an empty string if `html` is explicitly passed in as `null`
2019-12-18 15:58:27 +00:00
Rish
d964dec839 Version bump to 2.37.2 2019-12-18 15:11:27 +05:30
Rish
5958885e2e Updated Ghost-Admin to 2.37.2 2019-12-18 15:11:27 +05:30
Fabien O'Carroll
de65a153ce
Fixed duplicate require of common module (#11471)
no-issue

This was a local change that got forgotten in the previous cherrypick
2019-12-18 11:34:50 +02:00
Fabien O'Carroll
465d1ed040
🐛 Fixed 500 errors for incorrect Origin headers (#11470)
no-issue

Our function for determining cors options created a new instance of URL
without wrapping it in a try/catch which meant any failures to parse the
URL bubbled down as a 500 error.

500 errors are commonly used for alerting at the infrastructure level,
and this error is definitely one caused by a badly configured client, so
we wrap the construction and crap out with a Bad Request Error (HTTP
400) if it fails.
2019-12-18 11:02:36 +02:00
Rish
96aae6be2f Version bump to 2.37.1 2019-12-17 20:54:45 +05:30
Rish
d8c9adae69 Updated Ghost-Admin to 2.37.1 2019-12-17 20:54:45 +05:30
Hannah Wolfe
33b3e466fd Update dependency analytics-node to v3.4.0-beta.1 2019-12-16 21:06:09 +00:00
Hannah Wolfe
0cece0a2cc Update dependency @tryghost/social-urls to v0.1.5 2019-12-16 20:29:40 +00:00
Hannah Wolfe
69e8413357 Update dependency express-hbs to v2.3.0 2019-12-16 20:14:09 +00:00
Hannah Wolfe
549251de5b Update dependency gscan to v2.3.1 2019-12-16 19:59:23 +00:00
Nazar Gargol
c34c8e9611 Anchored gscan rules to be checked against v2 rules
no issue

- This allows to bump gscan version in the future without breaking changes. The rule set will stay the same across versions
2019-10-16 13:05:51 +02:00
Peter Zimon
9ca367f019 Refined member emails
no issues
- refined typography and spacing for member signup, singin and subscribe emails
2019-10-15 13:34:52 +02:00
Renovate Bot
76f7488986 Update dependency @tryghost/social-urls to v0.1.3 2019-10-14 15:28:19 +00:00
Kevin Ansfield
ceb9284cac Version bump to 2.37.0 2019-10-14 13:50:10 +01:00
Kevin Ansfield
8e2ed1d5b0 Updated Ghost-Admin to 2.37.0 2019-10-14 13:50:10 +01:00
Kevin Ansfield
bc8fc566a7 🐛 Fixed markdown card content appearing corrupted when editing a post
refs https://github.com/TryGhost/Ghost/issues/11235

- updates `@tryghost/url-utils` to a version with a fixed `markdownRelativeToAbsolute` method
2019-10-14 13:40:53 +01:00
Rishabh Garg
1e9d4875f5
Added new member subscription settings (#11240)
no issue

We added 2 new member subscription settings - `allowSelfSignup` and `fromAddress`- with defaults as `true` and `noreply`, this migration sets default values for both settings for users migrating from previous version and cleans up intermediate naming for `allowSelfSignup`.
2019-10-14 16:58:15 +05:30
Nazar Gargol
84d40983d2 Unskipped fixed test
no issue

- The test was fixed with 4a10ddc8fa
2019-10-14 12:21:26 +02:00
Renovate Bot
3e15b18bc6 Update dependency @tryghost/members-ssr to v0.7.1 2019-10-14 01:23:54 +00:00
John O'Nolan
29d5fe7c91
Update aggregate download count 2019-10-13 10:59:59 +07:00
Kevin Ansfield
0ee46ab7a8 Updated @tryghost/url-utils to v0.6.9
no issue

- contains guards to prevent unnecessary processing of markdown and html
2019-10-12 17:48:54 +01:00
Kevin Ansfield
85a03b19b1 🐛 Fixed errors when saving or importing posts with invalid URLs
no issue

- bumped @tryghost/url-utils to a version which catches parsing errors and returns the original url argument
2019-10-11 13:20:24 +01:00
Rish
dc6d768a6d Version bump to 2.36.0 2019-10-11 16:59:08 +05:30
Rish
0a75921a53 Updated Ghost-Admin to 2.36.0 2019-10-11 16:59:08 +05:30
Rish
cd02fd5c63 Renamed member requirePayment setting
no issue

Renames member setting `requirePaymentForSignup` -> `allowSelfSignup` to match members API usage
2019-10-11 14:08:31 +05:30
Fabien O'Carroll
85d83b4f08 Fixed regression test for canary content api
no-issue

We now return the visibility field on the content api
2019-10-11 14:14:46 +07:00
Fabien O'Carroll
3eb4427888
Exposed visibility prop for posts on canary api (#11229)
no-issue

This is required by the theme layer to style member only posts
differently
2019-10-11 13:58:50 +07:00
Fabien O'Carroll
95fa815eb3 Improved settings model tests
no-issue

This makes them way less brittle and reliant on correctly indexing an array
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
1500881923 Renamed getRequirePaymentSetting
no-issue

The negation before this function call was a little easy to miss for me
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
0c602976c0 Passed members_email_auth_secret to members-api
no-issue
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
cbb13904b8 Added members_email_auth_secret setting
no-issue

This will be used for signing HS256 JWTs it's a 64 byte (256 bit) hex
string
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
8b0130193c Installed @tryghost/members-api@0.8.2
no-issue

This version uses HS256 signed tokens for magic-links and provides much
smaller links but requires a 256bit (64 byte) secret
2019-10-11 13:47:48 +07:00
Fabien O'Carroll
ef5e6f7e5b Removed text-transform: capitalize from buttons
no-issue

Button text should be sentence case not title case
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
527632f287 Updated members email templates
no-issue

These changes fix come colors and styles
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
3062ec7690 Wired up members plaintext emails
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
257bebbb39 Wired up the members emails templates
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
f4d202d7c5 Added member email templates
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
98f27c1c33 Added getSubject function for members emails
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
6f160518d1 Ensured that members emails include our text version
no-issue
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
6070ebaf02 Installed @tryghost/members-api@0.8.1
no-issue

This includes changes to support custom subjects in emails and access to
the email of the recipient in the getHTML and getText functions
2019-10-11 11:45:11 +07:00
Fabien O'Carroll
b030081a4b Updated GhostMailer to allow forcing text content
no-issue

This is so that we can pass our own customised text content
2019-10-11 11:45:11 +07:00
Naz Gargol
1b04b48ffd Added from parameter for member emails (#11222)
* Added from parameter for member emails

no issue

- Passed in the `from` parameter when initializing members mailer to be able to customize outgoing address
- Extends GhsotMailer to accept a from parameter from the outside
2019-10-11 11:21:53 +07:00
Kevin Ansfield
816bec28c2 Version bump to 2.35.0 2019-10-10 18:18:45 +01:00
Kevin Ansfield
0cc8b019d1 Updated Ghost-Admin to 2.35.0 2019-10-10 18:18:45 +01:00