0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-13 22:41:32 -05:00
ghost/core/client
Sebastian Gierlinger 90176e1f40 Security improvements
no issue
- added CSRF protection
- changed session handling to express.session
- changed session handling to change session id
- added config property useCookieSession
- added file extension check for /ghost/upload
- removed /ghost/debug/db/reset
2013-10-17 15:28:28 +02:00
..
assets Security improvements 2013-10-17 15:28:28 +02:00
helpers Cleanup indentation and quotes 2013-09-26 15:06:31 +01:00
models Cleanup indentation and quotes 2013-09-26 15:06:31 +01:00
tpl Swapping escape to sanitze 2013-10-09 19:13:16 +01:00
views Security improvements 2013-10-17 15:28:28 +02:00
init.js Security improvements 2013-10-17 15:28:28 +02:00
markdown-actions.js Cleanup indentation and quotes 2013-09-26 15:06:31 +01:00
mobile-interactions.js Cleanup indentation and quotes 2013-09-26 15:06:31 +01:00
router.js Adds slashes to urls 2013-09-17 02:39:55 +01:00
toggle.js Cleanup indentation and quotes 2013-09-26 15:06:31 +01:00