0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-03-11 02:12:21 -05:00
ghost/core/test
Kevin Ansfield 4773939670 🔒 Improved validation of fetched urls and responses in oembed endpoint
no issue

- prevent oembed fetching from accessing IP addresses or localhost domains
- prevent oembed endpoint from passing through fetched responses as-is
  - reject any fetched data that does not validate against the oembed spec
  - strip any unknown properties from the oembed response before returning

Credits: Nick Mykhailyshyn
2020-03-09 10:42:25 +00:00
..
acceptance 🔒 Improved validation of fetched urls and responses in oembed endpoint 2020-03-09 10:42:25 +00:00
regression Fixed regression test 2020-02-27 12:57:53 +08:00
unit 🐛 Fixed publisher logo meta schema 2020-03-03 12:18:23 +00:00
utils Renamed test function to fix eslint warning 2020-02-24 20:51:09 +00:00
.eslintignore
.eslintrc.json Updated eslint for tests to allow async functions 2019-10-06 21:03:56 +07:00
.jshintrc