Infrastructure/ghost
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-03 23:00:14 -05:00
Code Issues Activity
ghost/core/server/api/canary
History
Kevin Ansfield 64ed246d03
Merge pull request from GHSA-4m2q-w26j-h268 
no issue

- added an `externalRequest` lib
  - uses same underlying `got` module as our `request` lib
  - uses `got`'s `beforeRequest` and `beforeRedirect` hooks to perform it's own dns resolution for each url that's encountered and aborts with an error if it resolves to a private IP address block
  - includes a bypass for Ghost's configured url so that requests to it's own hostname+port are not blocked
- updated v2 and canary oembed controllers to use the `externalRequest` lib
2020-06-02 14:30:10 +01:00
..
utils Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
actions.js
authentication.js Moved config from server to shared (#11850) 2020-05-27 18:47:53 +01:00
authors-public.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
config.js Moved config from server to shared (#11850) 2020-05-27 18:47:53 +01:00
db.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
email-preview.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
email.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
identities.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
images.js
index.js Added membersStripeConnect controller auth method 2020-06-02 15:28:42 +02:00
integrations.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
invites.js Moved core/server/lib/common/logging to core/shared/logging (#11857) 2020-05-28 19:30:23 +01:00
labels.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
mail.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
members.js Moved core/server/lib/common/logging to core/shared/logging (#11857) 2020-05-28 19:30:23 +01:00
memberSigninUrls.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
membersStripeConnect.js Added membersStripeConnect controller auth method 2020-06-02 15:28:42 +02:00
notifications.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
oembed.js Merge pull request from GHSA-4m2q-w26j-h268 2020-06-02 14:30:10 +01:00
pages-public.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
pages.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
posts-public.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
posts.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
preview.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
redirects.js
roles.js
schedules.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
session.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
settings-public.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
settings.js Wired up stripe-connect module to settings API 2020-06-02 15:28:42 +02:00
site.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
slack.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
slugs.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
tags-public.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
tags.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
themes.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
users.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
webhooks.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00