2
1
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2023-12-13 21:00:40 +01:00
Ghost/core/server
Hannah Wolfe 0462607296 Don't allow published_by override
- published_by should be set by business logic, rather than by users

Credits: An anonymous researcher working with Beyond Security's SecuriTeam Secure Disclosure program
2015-09-25 17:44:49 +01:00
..
api Don't alter password from User.edit endpoint 2015-09-23 23:07:49 +01:00
apps Merge pull request #5027 from felixrieseberg/iss4847 2015-03-19 10:47:01 -06:00
config Fix urlFor to preserve mailto: 2015-07-18 03:45:06 +02:00
controllers Returns 404 page instead of crashing a server whenever special characters are used for tag filtering 2015-09-20 22:47:34 +02:00
data Don't eager load relations on tag update 2015-09-17 09:59:46 +01:00
errors Fix signin errors 2015-08-10 12:26:45 +01:00
events Refactor sitemaps to use centralised events 2015-04-05 19:32:18 +01:00
helpers Add replacement for zero in plural helper 2015-09-22 16:00:20 +01:00
mail Mail consolidation 2015-08-20 11:36:14 +02:00
middleware Uncapitalise respects subdirectories & no encoding 2015-09-24 18:52:30 +01:00
models Don't allow published_by override 2015-09-25 17:44:49 +01:00
permissions Refactor handlePermissions 2015-08-11 16:03:57 +02:00
routes add author edit route 2015-09-23 08:33:09 -05:00
storage Merge pull request #4820 from phated/file-storage 2015-03-20 08:55:19 +00:00
translations foundation work for server-side i18n support: 2015-07-27 18:47:10 -04:00
utils Fix handling of slugs on import 2015-09-23 17:41:44 +01:00
views Fixup broken error page styles 2015-06-08 12:14:58 +01:00
filters.js Misc grunt /dev updates 2015-05-28 20:25:14 +01:00
ghost-server.js Startup message explicitly mentions production 2015-08-11 18:01:36 +01:00
i18n.js foundation work for server-side i18n support: 2015-07-27 18:47:10 -04:00
index.js Remove first run alert 2015-08-26 15:29:26 +01:00
require-tree.js Misc grunt /dev updates 2015-05-28 20:25:14 +01:00
update-check.js Use extends correctly & consistently 2015-06-25 19:56:27 +01:00