Ghost/core
Kevin Ansfield 64ed246d03
Merge pull request from GHSA-4m2q-w26j-h268
no issue

- added an `externalRequest` lib
  - uses same underlying `got` module as our `request` lib
  - uses `got`'s `beforeRequest` and `beforeRedirect` hooks to perform it's own dns resolution for each url that's encountered and aborts with an error if it resolves to a private IP address block
  - includes a bypass for Ghost's configured url so that requests to it's own hostname+port are not blocked
- updated v2 and canary oembed controllers to use the `externalRequest` lib
2020-06-02 14:30:10 +01:00
..
client@4195917ce8
frontend
server Merge pull request from GHSA-4m2q-w26j-h268 2020-06-02 14:30:10 +01:00
shared Fixed handling non-Ghost errors in Sentry 2020-06-01 19:01:51 +01:00
index.js