Sebastian Gierlinger 90176e1f40 Security improvements ... no issue - added CSRF protection - changed session handling to express.session - changed session handling to change session id - added config property useCookieSession - added file extension check for /ghost/upload - removed /ghost/debug/db/reset		2013-10-17 15:28:28 +02:00
..
client	Security improvements	2013-10-17 15:28:28 +02:00
server	Security improvements	2013-10-17 15:28:28 +02:00
shared	Further fix to image markdown	2013-09-27 14:17:19 +01:00
test	Security improvements	2013-10-17 15:28:28 +02:00
config-loader.js	Update config validation to allow for socket only	2013-10-10 16:13:02 +01:00
ghost.js	Configuration validation in config-loader	2013-09-26 23:07:48 +01:00
server.js	Security improvements	2013-10-17 15:28:28 +02:00