Kevin Ansfield 061368a137 Merge pull request from GHSA-4m2q-w26j-h268 ... back-ported from 64ed246d03 - added an `externalRequest` lib - uses same underlying `got` module as our `request` lib - uses `got`'s `beforeRequest` and `beforeRedirect` hooks to perform it's own dns resolution for each url that's encountered and aborts with an error if it resolves to a private IP address block - includes a bypass for Ghost's configured url so that requests to it's own hostname+port are not blocked - updated v0.1, v2 and canary oembed controllers to use the `externalRequest` lib		2020-06-04 16:58:51 +01:00
..
common
fs	Updated docs api links to be version-less	2019-07-25 15:17:23 +08:00
image	Update Test & linting packages (major) (#10858)	2019-07-05 13:40:43 +02:00
mobiledoc	🐛 Fixed rendering and url transformation of v1 "card-markdown" aliased cards	2019-10-10 16:35:29 +01:00
promise	Update Test & linting packages (major) (#10858)	2019-07-05 13:40:43 +02:00
security
ghost-version_spec.js
request-external_spec.js	Merge pull request from GHSA-4m2q-w26j-h268	2020-06-04 16:58:51 +01:00
request_spec.js	Updated tests eslint config to use eslint-plugin-ghost@0.5.0	2019-08-19 13:38:35 +01:00