69 Commits

Author	SHA1	Message	Date
Fabian Becker	428fb94278	Fixes random pg failures. ... fixes #2075 - Updates knex to latest version - Fixes expected value in page test - Change fixture insertion to be sequential - Add orderBy to insertMorePostsTags fixture helper	2014-03-17 10:54:31 +00:00
Sebastian Gierlinger	ac7f4f05c4	Add validation from schema.js ... closes #1401 - added data/validation/index.js - added generic validation for length - added generic validation for nullable - added validations object to schema.js for custom validation - removed pyramid of doom from api/db.js	2014-02-19 18:32:23 +01:00
Sebastian Gierlinger	ea6c601b01	Improvements for models ... #closes #1655 - removed models as parameter for bookshelf-session - changed to read permittedAttributes from schema.js - changed updateTags to be executed at saved event - added validate to execute after saving event - added test for published_at = null (see #2015) - fixed typo in general.hbs	2014-02-19 14:57:26 +01:00
John-David Dalton	6eab7b3f92	Replace underscore with lodash.	2014-02-06 14:08:34 +00:00
Hannah Wolfe	3f9b0fa618	Disable xss santization ... issue #1378 fixes #1328 - xss santization does some odd things. This isn't needed until we have multi-user support, and we are investigating better solutions.	2014-01-06 20:17:20 +00:00
Sebastian Gierlinger	77ed7f8ac6	Add transactions for import ... closes #837 - added transaction handling for import - added transactions to model functions - added simple tests for failing imports	2013-11-20 21:36:02 +01:00
Tim Griesser	13639ad8d1	Updating to bookshelf 0.5.7 & knex 0.4.11	2013-10-17 18:23:36 +01:00
Hannah Wolfe	95f9fce3be	Swapping escape to sanitze ... issue #938 - rather than using escape, use node-validatiors santize function which is designed for preventing xss vectors - added listener for changes to both editor and settings page - added more sanitization to the user model - consistently use triple-braces when outputting blog post titles	2013-10-09 19:13:16 +01:00
Tim Griesser	c9235ccb0b	Escaping several fields to prevent XSS ... issue #938 - escapes post's title field - escapes settings title, description, email - escapes user's name field - includes test for post title	2013-10-09 19:13:13 +01:00
John O'Nolan	d1957958e3	Cleanup indentation and quotes ... Aligns all requirements vertically for easier reading + adds single quote standard consistently throughout Ghost, except in long strings.	2013-09-26 15:06:31 +01:00
Hannah Wolfe	0c545d5f2e	Cleanup	2013-09-19 08:51:01 +01:00
Hannah Wolfe	71a92194ca	Improved error messaging ... closes #748 - Removed the alpha software warning - Better error message output for the whole app - can now specify an error, a context, and a help message - Improved invalid node version, start and stop messaging - Listens for Ctrl+C and exits nicely - Minor improvements to handling and errors with old DBs (temporary)	2013-09-15 13:52:58 +01:00
Hannah Wolfe	b902f8109c	Renaming default to defaultValue as default is reserved	2013-09-14 22:39:31 +01:00
Hannah Wolfe	d587a845d4	Set migrations to use new 000 schema ... issue #632 - removed old schemas - updated base model to reflect all of the consistent behaviours and properties across the models - updated all models to match the new schema TODO - no fixtures are currently loaded except settings - need to rename properties across the codebase	2013-09-14 20:01:46 +01:00
Hannah Wolfe	0b1ffcd1f5	Updating settings types ... - issue #573, issue #632	2013-09-14 19:04:41 +01:00
Adam Howard	3823d10c35	Restructure default-settings.json and add validations to important settings.	2013-09-14 14:29:27 +01:00
Adam Howard	e24b5c3382	Proper settings infrastructure, allowing new features without compromising old data. ... On server load, check for settings which have not been set, and apply a default value to the settings table from a JSON file.	2013-09-03 22:56:34 +01:00
Hannah Wolfe	c70dfde7e3	Agressive stripping of the model attributes ... - fixes #517 - prevents this from occuring again in future with other relations - validation function & stripping done for all models - casper test for flow, plus validation & logged out tests	2013-08-25 18:12:27 +01:00
Hannah Wolfe	30b4eb07f7	App restructure - closes #245 ... - This is a first pass at getting a more logical structure. The focus is on moving from admin/frontend to client/server. - The location of the databases is highly important, this isn't expected to change again In the future - client/assets should probably become public/ - more stuff should be shared (helpers etc) - cleanup some confusion around tpl and views	2013-07-11 20:23:34 +01:00