Ghost/ghost/core
Fabien 'egg' O'Carroll b3471ab439
Improved comments API security (#15065)
refs https://github.com/TryGhost/Team/issues/1688

* Added missing/failing tests
* Refactored comments BREAD into service
* Ensured member_id is not writable, it should come from auth only
* Ensured one cannot reply to a reply
* Ensured the parent_id is not writable on edit
2022-07-25 10:41:33 +01:00
..
content
core Improved comments API security (#15065) 2022-07-25 10:41:33 +01:00
test Improved comments API security (#15065) 2022-07-25 10:41:33 +01:00
.c8rc.json
.eslintignore
.eslintrc.js
.gitignore
.npmignore
config.development.json
ghost.js
Gruntfile.js
index.js
jsconfig.json
loggingrc.js
MigratorConfig.js
package.json Added yarn setup to root scripts 2022-07-25 08:35:57 +02:00