0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-10 23:36:14 -05:00
ghost/test/unit/frontend/helpers
Fabien "egg" O'Carroll b82dc7ae7c 🔒 Fixed RCE exploit with date helper & locale setting
refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-7v28-g2pq-ggg8

A vulnerability in an upstream library means an attacker can abuse locale input
to execute arbitrary commands from a file that has previously been uploaded
using the file upload functionality in the post editor.
2022-06-14 22:50:22 -04:00
..
test_tpl Updated content cta helper to use new tiers helper 2022-03-04 18:22:59 +05:30
asset.test.js 🎨 Reduced favicon requirements and added image formatting (#14918) 2022-05-27 16:36:53 +02:00
authors.test.js
body_class.test.js Fixed frontend rendering of page resource 2022-05-16 22:06:55 +08:00
cancel_link.test.js
concat.test.js
content.test.js
date.test.js 🔒 Fixed RCE exploit with date helper & locale setting 2022-06-14 22:50:22 -04:00
encode.test.js
excerpt.test.js Updated output logic to correctly use excerpt 2022-05-16 15:51:14 +01:00
facebook_url.test.js
foreach.test.js
get.test.js 🔥 Removed versioned APIs 2022-04-28 15:37:09 +01:00
ghost_foot.test.js
ghost_head.test.js 🎨 Reduced favicon requirements and added image formatting (#14918) 2022-05-27 16:36:53 +02:00
has.test.js
img_url.test.js
is.test.js
lang.test.js
link.test.js
link_class.test.js
match.test.js Added >, <, >=, and <= operators to match helper (#14215) 2022-03-03 15:43:47 +01:00
meta_description.test.js
meta_title.test.js
navigation.test.js
next_post.test.js 🔥 Removed versioned APIs 2022-04-28 15:37:09 +01:00
page_url.test.js
pagination.test.js
plural.test.js
post_class.test.js
prev_post.test.js 🔥 Removed versioned APIs 2022-04-28 15:37:09 +01:00
price.test.js
raw.test.js
reading_time.test.js
t.test.js Moved locale testing out of casper fixture (#13850) 2021-12-06 15:11:54 +00:00
tags.test.js
tiers.test.js Fixed mockLabs disabling all other flags (#14621) 2022-04-28 10:55:20 +02:00
title.test.js
twitter_url.test.js
url.test.js 🔥 Removed support for http/https mixed mode (#14783) 2022-05-11 14:53:23 +01:00