Ghost

Please see the blog post for an overview of this release, or check out the

Highlights:

[Security] Improved password reset comparison
[Fixed] SSL config errors
[Fixed] Several login/session problems
[Fixed] Post settings input errors
[Fixed] Errors in themes no longer crash Ghost
[Fixed] Consistent paths for storing images
[Fixed] Import tool browser compatibility
[Fixed] Issues with unicode characters in post urls

Full changelog

This release represents a total of 374 commits across 178 issues from 88 incredible contributors all over the world.

Aton - the Egyptian God of Sun - is the first release named for one of our 3 Kickstarter backers who pledged £1,000 to making Ghost a reality last year. Aton Energy develops smart, clean technologies to make your life easier and greener. They're pretty awesome.

What's in The Box

Ghost 0.4 is chock full of features, improvements and fixes. We really think you're going to love this update.

Please read the release blog post for the highlights of this release, check out the release notes or see the changelog for full details.

This is a release candidate, it exists for testing purposes.

• It should not be considered stable
• It should not be used on production environments.

The zip is a proper 'built' release of Ghost, just like you would get from Ghost.org, so use it with npm install --production no grunt stuff required.

Install instructions, as always, are at http://docs.ghost.org/installation

This is a release candidate, it exists for testing purposes.

• It should not be considered stable
• It should not be used on production environments.

The zip is a proper 'built' release of Ghost, just like you would get from Ghost.org, so use it with npm install --production no grunt stuff required.

Install instructions, as always, are at http://docs.ghost.org/installation

This is a release candidate, it exists for testing purposes.

• It should not be considered stable
• It should not be used on production environments.

The zip is a proper 'built' release of Ghost, just like you would get from Ghost.org, so use it with npm install --production no grunt stuff required.

Install instructions are at http://support.ghost.org/installation

[Fixed] Broken URL-based image uploads on settings screens
[Fixed] Console error on content screen with no posts
[Fixed] Empty previews on content screen after scroll
[Fixed] Private data appearing in API response
[Fixed] Various firefox display bugs
[Fixed] Various security issues
[Added] CSRF protection across the admin
[Updated] Bookshelf to 0.5.7
[Updated] Knex to 0.4.11

Please see the blog post for further information

[Fixes] 500 Error in the Ghost importer
[Fixes] Critical issue with markdown being treated as HTML
[Fixes] MySQL issues with deleting posts and tags
[Fixes] Auto-linking inside of code blocks
[Fixes] Pagination partial in theme not overriding the default
[Fixes] Sendmail auto-detection
[Fixes] Date keyboard shortcut crashing the browser
[Fixes] URL-based image uploads saving in the wrong place
[Fixes] Admin redirect resulting in double slash
[Fixes] Broken help & support link
[Fixes] Overly detailed meta generator tag, now only 2 decimals
[Adds] Validation of config.js
[Adds] Full content in RSS feeds
[Adds] Support for embedded gists in Casper

Note: Includes updates to Casper

[Fixes] Tag class handling in postclass and bodyclass
[Fixes] Potential XSS vulnerability in admin
[Fixes] Handlebars template files being served on front end
[Fixes] Incorrect mail example in config.example.js
[Fixes] Mail 'from' address is now configurable
[Fixes] Issues with adding images via URL
[Adds] Support for sockets rather than ports
[Adds] SECURITY.md for reporting security issues

Note: Includes updates to Casper