mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-20 22:42:53 -05:00
06dd9bac59
refs https://github.com/TryGhost/Team/issues/687 - The approach of generating validation properties using `/server/data/schema` package's tables object is prone to leaking unwanted database fields into API responses - This refactor takes a tiny step into direction of relying on "allowlist" approach for properties in the API response resources. - Apart from solving the described property leak problem it also moves toward decoupling tests from `/core/server` dependencies! |
||
---|---|---|
.. | ||
admin | ||
content | ||
README.md |
Acceptance Tests
This folder should only contain a set of basic API use cases.
The goal for acceptance tests is to keep test cases to basic usecases e.g. upload an image, schedule a post, download a theme. Otherwise tests should be written as a part of regression test suite.
Future improvement notes:
- We probably need a differentiation for the acceptance tests for session and api_key authentication.