Ghost/core/server/web/api
Fabien 'egg' O'Carroll 244704156c
Updated all Origin header checks to handle 'null' (#12246)
closes #12244

As per RFC 6454 the Origin header MUST be set to the string 'null' when
in a "privacy-sensitive" context. We were not handling this string and
this was causing errors. This commit updates all checks of the 'Origin'
header to treat the value 'null' as if the header was not present.

ref: https://tools.ietf.org/html/rfc6454#section-7.3
2020-10-01 09:37:22 +01:00
..
canary Added handling for new members support/reply email addresses 2020-08-31 18:09:38 +05:30
middleware Updated all Origin header checks to handle 'null' (#12246) 2020-10-01 09:37:22 +01:00
v2 Updated stability index comments around Admin API v2 endpoints 2020-08-03 23:46:23 +12:00
app.js Added a server testmode to help test behaviour 2020-08-10 16:38:49 +01:00
index.js Renamed app related files+variables for clarity 2020-04-27 17:50:08 +01:00
testmode.js Added job-manager & wired up shutdown and testmode 2020-08-11 21:31:34 +01:00