Ghost/core/server/services
Fabien 'egg' O'Carroll 244704156c
Updated all Origin header checks to handle 'null' (#12246)
closes #12244

As per RFC 6454 the Origin header MUST be set to the string 'null' when
in a "privacy-sensitive" context. We were not handling this string and
this was causing errors. This commit updates all checks of the 'Origin'
header to treat the value 'null' as if the header was not present.

ref: https://tools.ietf.org/html/rfc6454#section-7.3
2020-10-01 09:37:22 +01:00
..
adapter-manager Moved config from server to shared (#11850) 2020-05-27 18:47:53 +01:00
auth Updated all Origin header checks to handle 'null' (#12246) 2020-10-01 09:37:22 +01:00
bulk-email Refactor mega service to use stored email content and batch/recipient records 2020-09-29 17:17:54 +01:00
invitations 🐛 Fixed error caused by accepting invitation with existing email (#12172) 2020-09-09 11:58:53 +12:00
jobs Added job-manager & wired up shutdown and testmode 2020-08-11 21:31:34 +01:00
mail Updated error name check in GhostMailer 2020-07-21 01:08:19 +05:30
mega Refactor mega service to use stored email content and batch/recipient records 2020-09-29 17:17:54 +01:00
members Added extra settings to member auth emails (#12238) 2020-10-01 12:31:36 +05:30
permissions Improved password reset and session invalidation for "locked" users (#11790) 2020-05-05 19:37:53 +01:00
settings Fixed settings reinit to only emit changed settings events (#12184) 2020-09-23 14:35:03 +01:00
webhooks Extracted promise libs and history into @tryghost/promise 2020-08-11 18:44:21 +01:00
labs.js Moved core/server/lib/common/logging to core/shared/logging (#11857) 2020-05-28 19:30:23 +01:00
slack.js Moved core/server/lib/common/logging to core/shared/logging (#11857) 2020-05-28 19:30:23 +01:00
xmlrpc.js Moved core/server/lib/common/logging to core/shared/logging (#11857) 2020-05-28 19:30:23 +01:00