Infrastructure/ghost: Independent technology for modern publishing, memberships, subscriptions and newsletters.

mirror of https://github.com/TryGhost/Ghost.git synced 2025-04-01 02:41:39 -05:00

Independent technology for modern publishing, memberships, subscriptions and newsletters.

blogging cms creator-economy ghost hacktoberfest headless-cms jamstack javascript journalism nodejs publishing web-application

Find a file

Fabien O'Carroll d82c15619d Used dedicated email address change endpoint refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-65p7-pjj8-ggmr We were originally overloading the signup/signin flow for changing email addresses, which was a security flaw because this route is unauthenticated. This functionality has been removed and replaced with a dedicated flow.	2021-09-22 16:37:32 +02:00
ghost/portal	Used dedicated email address change endpoint	2021-09-22 16:37:32 +02:00

Fabien O'Carroll d82c15619d Used dedicated email address change endpoint

refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-65p7-pjj8-ggmr

We were originally overloading the signup/signin flow for changing email
addresses, which was a security flaw because this route is
unauthenticated. This functionality has been removed and replaced with a
dedicated flow.

2021-09-22 16:37:32 +02:00

ghost/portal

Used dedicated email address change endpoint

2021-09-22 16:37:32 +02:00