Kevin Ansfield 64ed246d03 Merge pull request from GHSA-4m2q-w26j-h268 ... no issue - added an `externalRequest` lib - uses same underlying `got` module as our `request` lib - uses `got`'s `beforeRequest` and `beforeRedirect` hooks to perform it's own dns resolution for each url that's encountered and aborts with an error if it resolves to a private IP address block - includes a bypass for Ghost's configured url so that requests to it's own hostname+port are not blocked - updated v2 and canary oembed controllers to use the `externalRequest` lib		2020-06-02 14:30:10 +01:00
..
fs
image	Moved core/server/lib/url-utils to core/shared/url-utils (#11856)	2020-05-28 11:57:02 +01:00
promise
security
external-request_spec.js	Merge pull request from GHSA-4m2q-w26j-h268	2020-06-02 14:30:10 +01:00
ghost-version_spec.js
mobiledoc_spec.js
request_spec.js