Infrastructure/ghost
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-03 23:00:14 -05:00
Code Issues Activity
ghost/core/server/api/v2
History
Kevin Ansfield 64ed246d03
Merge pull request from GHSA-4m2q-w26j-h268 
no issue

- added an `externalRequest` lib
  - uses same underlying `got` module as our `request` lib
  - uses `got`'s `beforeRequest` and `beforeRedirect` hooks to perform it's own dns resolution for each url that's encountered and aborts with an error if it resolves to a private IP address block
  - includes a bypass for Ghost's configured url so that requests to it's own hostname+port are not blocked
- updated v2 and canary oembed controllers to use the `externalRequest` lib
2020-06-02 14:30:10 +01:00
..
utils Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
actions.js
authentication.js Moved config from server to shared (#11850) 2020-05-27 18:47:53 +01:00
authors-public.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
config.js Moved config from server to shared (#11850) 2020-05-27 18:47:53 +01:00
db.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
images.js Renamed uploads to images 2019-02-24 11:18:45 +07:00
index.js Merge branch 'master' into v3 2019-10-11 11:31:31 +01:00
integrations.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
invites.js Moved core/server/lib/common/logging to core/shared/logging (#11857) 2020-05-28 19:30:23 +01:00
mail.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
notifications.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
oembed.js Merge pull request from GHSA-4m2q-w26j-h268 2020-06-02 14:30:10 +01:00
pages-public.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
pages.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
posts-public.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
posts.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
preview.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
redirects.js Extracted frontend code from redirects API controllers (#10798) 2019-06-21 16:50:16 +02:00
roles.js
schedules.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
session.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
settings-public.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
settings.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
site.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
slack.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
slugs.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
tags-public.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
tags.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
themes.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
users.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
webhooks.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00