0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-20 22:42:53 -05:00
ghost/core/test/unit
jamesbloomer 9d114c7fa6 Lock down theme static directory to not serve templates, markdown and text files.
closes #942
- insert custom middleware to check for blacklisted files
- redirect to express.static if file accepted
- if not valid return next() to do nothing
- currently black listing .hbs, .txt, .md and .json
- debatable which is best, black list or white list, either one will probably need tweaks but erred on side of letting
a theme serve unknown types
2013-10-11 18:05:31 +01:00
..
fixtures Allow theme partials to override helper templates 2013-08-02 13:36:37 -05:00
admin_spec.js Merge branch '0.3.1-wip' 2013-09-27 17:22:55 +01:00
api_permissions_spec.js Updating unit tests 2013-09-15 00:22:16 +01:00
api_posts_spec.js Swapping escape to sanitze 2013-10-09 19:13:16 +01:00
api_settings_spec.js Merge pull request #923 from ErisDS/0.3.1-wip-mysql 2013-09-27 05:04:45 -07:00
api_tags_spec.js Unit Test fixes for MySQL 2013-09-27 12:52:31 +01:00
api_users_spec.js Updating unit tests 2013-09-15 00:22:16 +01:00
client_ghostdown_spec.js Save image uploads in the editor 2013-09-16 18:08:49 +01:00
client_showdown_int_spec.js No autolinking inside of code blocks 2013-09-27 11:35:44 +01:00
errorHandling_spec.js 500 Series Error Handling & Stack Traces 2013-09-19 13:01:20 +10:00
export_spec.js One exporter to rule them all 2013-09-15 17:04:42 +01:00
ghost_spec.js Configuration validation in config-loader 2013-09-26 23:07:48 +01:00
import_spec.js Handle duplicate tags on import 2013-09-25 11:30:59 +01:00
mail_spec.js Clean up config (drop 'env') 2013-09-14 13:14:00 +01:00
middleware_spec.js Lock down theme static directory to not serve templates, markdown and text files. 2013-10-11 18:05:31 +01:00
permissions_spec.js Unit Test fixes for MySQL 2013-09-27 12:52:31 +01:00
plugins_spec.js Removing FancyFirstChar plugin 2013-09-18 19:49:10 +01:00
server_helpers_index_spec.js Trim version number to major and minor numbers only in meta tag 2013-09-26 15:00:05 +01:00
shared_gfm_spec.js Don't output image tag for empty source 2013-09-27 11:30:41 +01:00
testUtils.js Unit Test fixes for MySQL 2013-09-27 12:52:31 +01:00