3 Commits

Author	SHA1	Message	Date
Hannah Wolfe	14b3431de1	🔒 Removed unused and insecure preview endpoint ... refs: https://github.com/TryGhost/Ghost/security/advisories/GHSA-9fgx-q25h-jxrg - This was part of an experiment during the build phase of 4.0. We never ended up using it, but the endpoint wasn't cleaned up. - The endpoint leaves sites open to a security vulnerability. Anyone running 4.x should update to 4.3.3 Credits: Paul Gerste, SonarSource (https://www.sonarsource.com/)	2021-04-29 12:10:39 +01:00
Hannah Wolfe	a0bdba2516	✨ Added theme preview mode ... - Allow the frontend to accept post messages to generate previews of the frontend - Created a new endpoint in admin we can use to render these previews, which is possibly not necessary - Supports a limited group of settings, which can easily be expanded, but care should be taken if expanding to use user-provided strings	2021-02-17 13:49:41 +00:00
Katharina Irrgang	7bcccc71dc	Moved apps into web folder (#9308) ... refs #9178 - move express apps to one place (called `web`) - requires https://github.com/TryGhost/Ghost-Admin/pull/923 - any further improvements are not part of this PR - this PR just moves the files and ensures the paths are up-to-date	2017-12-06 17:37:54 +01:00