2 Commits

Author	SHA1	Message	Date
Daniel Lockyer	9ba251238a	Added Content-Version header to all API requests ... refs https://github.com/TryGhost/Team/issues/2400 - we've deemed it useful to start to return `Content-Version` for all API requests, because it becomes useful to know which version of Ghost a response has come from in logs - this should also help us detect Admin<->Ghost API mismatches, which was the cause of a bug recently (ref'd issue)	2023-01-18 08:38:07 +01:00
Fabien 'egg' O'Carroll	2ff81cc5d3	🔒 Fixed rate limiting for user login (#15336) ... refs https://github.com/TryGhost/Team/issues/1074 Rather than relying on the global block to stop malicious actors from enumerating email addresses to determine who is and isn't a user, we want our user login brute force protection to be on an IP basis, rather than tied to the username.	2022-08-31 10:33:42 -04:00