Ghost/ghost/core/test/e2e-api/content
Kevin Ansfield 281fbc973e
🐛 Fixed mobiledoc and lexical content being available via Content API
refs https://github.com/TryGhost/Product/issues/4088

The Content API should not expose the lexical/mobiledoc source content because it's not membership-gated and although not used at the present time may in future contain additional internal metadata. We were handling this for the more-typical `?formats` param but it was still possible to access this data using the `?fields` param.

- updated post mapper used in our API output serializers to strip the `mobiledoc` and `lexical` fields ready for API output
- credits to Prathap Puthran for reporting
2023-11-01 16:10:41 +01:00
..
__snapshots__ 🐛 Fixed mobiledoc and lexical content being available via Content API 2023-11-01 16:10:41 +01:00
authors.test.js Fixed configUtils and adapter cache issues in E2E tests (#16167) 2023-01-30 14:06:20 +01:00
collections.test.js Added Collections Content API 2023-07-25 16:14:02 +02:00
key_authentication.test.js Changed Content API caching to public 2022-09-26 14:54:50 +08:00
newsletters.test.js Added Content-Version header to all API requests 2023-01-18 08:38:07 +01:00
offers.test.js Added Content-Version header to all API requests 2023-01-18 08:38:07 +01:00
pages.test.js 🐛 Fixed mobiledoc and lexical content being available via Content API 2023-11-01 16:10:41 +01:00
posts.test.js 🐛 Fixed mobiledoc and lexical content being available via Content API 2023-11-01 16:10:41 +01:00
recommendations.test.js Renamed reason to description in recommendations table (#18527) 2023-10-09 11:19:44 -03:00
settings.test.js Added Content-Version header to all API requests 2023-01-18 08:38:07 +01:00
tags.test.js Updated to use assert/strict everywhere (#17047) 2023-06-21 09:56:59 +01:00
tiers.test.js Tested filtering visibility in Tiers Content API 2023-05-19 13:12:33 -04:00
utils.js Removed all unused variables from test files 2023-03-10 14:29:55 +01:00