Ghost/ghost/core/test
Ronald Langeveld abc7af8082 Added test email rate limiting (#17505)
refs https://github.com/TryGhost/Product/issues/3651

- This is a security fix that addresses an issue causing malicious users
to abuse the test / preview email API endpoint.
- We have multiple procedures in place now to limit such users.
- First, we now only allow one email address to be passed into the
`sendTestEmail` method. This method only have one purpose, which is to
compliment the test email functionality within the Editor in Admin and
therefore have no reason to send to more than one email address at a
time.
- We then add an additional rate limiter to prevent a user from making
multiple requests, eg via a script.
- The new imposed limit is 10 test emails per hour.
2023-07-27 09:22:26 +02:00
..
e2e-api Added test email rate limiting (#17505) 2023-07-27 09:22:26 +02:00
e2e-browser Fixed @tryghost/mailgun-client import 2023-05-09 13:00:18 -04:00
e2e-frontend Updated to use assert/strict everywhere (#17047) 2023-06-21 09:56:59 +01:00
e2e-server Updated to use assert/strict everywhere (#17047) 2023-06-21 09:56:59 +01:00
e2e-webhooks Updated snapshots to include show_title_and_feature_image in event payload (#17378) 2023-07-14 16:03:40 -07:00
integration Fixed resetting database in migrations tests 2023-07-07 18:42:18 +02:00
regression Removed Bluebird from tests 2023-06-23 10:03:03 +02:00
unit Made lexical rendering async (#17438) 2023-07-20 17:48:48 -05:00
utils Made lexical rendering async (#17438) 2023-07-20 17:48:48 -05:00
.eslintignore Converted Ghost repo into a monorepo 2022-07-20 16:41:05 +02:00
.eslintrc.js Removed all unused variables from test files 2023-03-10 14:29:55 +01:00