0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-17 23:44:39 -05:00
ghost/core/server
Hannah Wolfe 0462607296 Don't allow published_by override
- published_by should be set by business logic, rather than by users

Credits: An anonymous researcher working with Beyond Security's SecuriTeam Secure Disclosure program
2015-09-25 17:44:49 +01:00
..
api Don't alter password from User.edit endpoint 2015-09-23 23:07:49 +01:00
apps
config Fix urlFor to preserve mailto: 2015-07-18 03:45:06 +02:00
controllers Returns 404 page instead of crashing a server whenever special characters are used for tag filtering 2015-09-20 22:47:34 +02:00
data Don't eager load relations on tag update 2015-09-17 09:59:46 +01:00
errors Fix signin errors 2015-08-10 12:26:45 +01:00
events
helpers Add replacement for zero in plural helper 2015-09-22 16:00:20 +01:00
mail Mail consolidation 2015-08-20 11:36:14 +02:00
middleware Uncapitalise respects subdirectories & no encoding 2015-09-24 18:52:30 +01:00
models Don't allow published_by override 2015-09-25 17:44:49 +01:00
permissions Refactor handlePermissions 2015-08-11 16:03:57 +02:00
routes add author edit route 2015-09-23 08:33:09 -05:00
storage
translations foundation work for server-side i18n support: 2015-07-27 18:47:10 -04:00
utils Fix handling of slugs on import 2015-09-23 17:41:44 +01:00
views
filters.js
ghost-server.js Startup message explicitly mentions production 2015-08-11 18:01:36 +01:00
i18n.js foundation work for server-side i18n support: 2015-07-27 18:47:10 -04:00
index.js Remove first run alert 2015-08-26 15:29:26 +01:00
require-tree.js
update-check.js