Ghost/core/server/models
Rishabh Garg 7182efdb88
🐛 Fixed special chars in single use token (#12290)
no refs

- The token generation logic for single use token was replacing only the first instance of + or / to make the token URL safe, instead of replacing all instances which caused a bug where token was not validated properly in case it included multiple + or / in it.

- The fix ensures replacing all the + or / in the token with URL safe _ or - so it can be properly validated via magic link
2020-10-20 11:49:20 +05:30
..
base Fixed "no-shadow" linting error in server modules (#12287) 2020-10-20 12:02:56 +13:00
plugins Fixed "no-shadow" linting error in server modules (#12287) 2020-10-20 12:02:56 +13:00
relations Extracted promise libs and history into @tryghost/promise 2020-08-11 18:44:21 +01:00
action.js Added model implementation for actions 2019-02-06 21:36:09 +01:00
api-key.js Fixed "no-shadow" linting error in server modules (#12287) 2020-10-20 12:02:56 +13:00
author.js Added plugin based author and public tag models in API v2 (#10284) 2019-01-03 20:30:35 +01:00
email-batch.js Fixed creation of EmailBatch and EmailRecipient collections 2020-10-14 15:11:45 +01:00
email-recipient.js Fixed creation of EmailBatch and EmailRecipient collections 2020-10-14 15:11:45 +01:00
email.js Store email batch and recipient records when sending newsletters (#12195) 2020-09-29 17:17:54 +01:00
index.js Added basic CRUD admin API for snippets 2020-10-16 18:02:58 +01:00
integration.js Ensured Admin API cannot fetch internal integrations (#10501) 2019-07-24 11:52:55 +02:00
invite.js Extracted core/server/lib/security to @tryghost/security package 2020-08-11 14:06:50 +01:00
label.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
member-stripe-customer.js Added error handling for failed member imports 2020-08-26 17:11:35 +12:00
member.js Fixed "no-shadow" linting error in server modules (#12287) 2020-10-20 12:02:56 +13:00
mobiledoc-revision.js Added mobiledoc revisions functionality 2018-10-09 15:31:09 +02:00
permission.js Updated var declarations to const/let and no lists 2020-04-29 16:51:13 +01:00
post.js Added support for ordering Post API resources by fields coming form posts_meta table (#12226) 2020-09-24 13:32:40 +12:00
posts-meta.js Moved core/server/lib/url-utils to core/shared/url-utils (#11856) 2020-05-28 11:57:02 +01:00
role.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
session.js Removed user_id constraint when upserting session (#10085) 2018-10-30 16:15:48 +07:00
settings.js Fixed "no-shadow" linting error in server modules (#12287) 2020-10-20 12:02:56 +13:00
single-use-token.js 🐛 Fixed special chars in single use token (#12290) 2020-10-20 11:49:20 +05:30
snippet.js Added basic CRUD admin API for snippets 2020-10-16 18:02:58 +01:00
stripe-customer-subscription.js Added error handling for failed member imports 2020-08-26 17:11:35 +12:00
tag-public.js Added plugin based author and public tag models in API v2 (#10284) 2019-01-03 20:30:35 +01:00
tag.js Refactored common lib import to use destructuring (#11835) 2020-05-22 19:22:20 +01:00
user.js Fixed "no-shadow" linting error in server modules (#12287) 2020-10-20 12:02:56 +13:00
webhook.js Updated var declarations to const/let and no lists 2020-04-29 16:51:13 +01:00