Kevin Ansfield 64ed246d03 Merge pull request from GHSA-4m2q-w26j-h268 ... no issue - added an `externalRequest` lib - uses same underlying `got` module as our `request` lib - uses `got`'s `beforeRequest` and `beforeRedirect` hooks to perform it's own dns resolution for each url that's encountered and aborts with an error if it resolves to a private IP address block - includes a bypass for Ghost's configured url so that requests to it's own hostname+port are not blocked - updated v2 and canary oembed controllers to use the `externalRequest` lib		2020-06-02 14:30:10 +01:00
..
fs	Updated var declarations to const/let and no lists	2020-04-29 16:51:13 +01:00
image	Moved core/server/lib/url-utils to core/shared/url-utils (#11856)	2020-05-28 11:57:02 +01:00
promise	Updated var declarations to const/let and no lists	2020-04-29 16:51:13 +01:00
security	Updated var declarations to const/let and no lists	2020-04-29 16:51:13 +01:00
external-request_spec.js	Merge pull request from GHSA-4m2q-w26j-h268	2020-06-02 14:30:10 +01:00
ghost-version_spec.js	Updated var declarations to const/let and no lists	2020-04-29 16:51:13 +01:00
mobiledoc_spec.js	Switched to extracted @tryghost/mobiledoc-dom-renderer package	2020-04-08 18:27:12 +01:00
request_spec.js	Move tests from core to root (#11700)	2020-03-30 16:26:47 +01:00