ghost 5.14.2 → 5.16.0

package/core/built/admin/index.html

@@ -8,7 +8,7 @@
     <title>Ghost Admin</title>
 
     
-<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%225.14%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
+<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%225.16%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
 
     <meta name="HandheldFriendly" content="True" />
     <meta name="MobileOptimized" content="320" />
@@ -20,7 +20,7 @@
     <meta name="apple-mobile-web-app-status-bar-style" content="black" />
     <meta name="apple-mobile-web-app-title" content="Ghost" />
 
-    <link rel="shortcut icon" href="assets/img/favicon.ico" />
+    <link rel="shortcut icon" href="assets/img/favicon-a9c6dbdcdc3ae568f4e0dad92149a0e3.ico" />
     <link rel="apple-touch-icon" href="assets/img/apple-touch-icon-74680e326a7e87b159d366c7d4fb3d4b.png" />
 
     <meta name="application-name" content="Ghost" />
@@ -37,7 +37,7 @@
     </style>
 
     <link integrity="" rel="stylesheet" href="assets/vendor-733135cd6cbca8126c6fa223d63a5bf3.css">
-    <link integrity="" rel="stylesheet" href="assets/ghost-40adc8310dcdd0be163cbf7b9d89c59a.css" title="light">
+    <link integrity="" rel="stylesheet" href="assets/ghost-6491d134c450ca676911ea17e16cd7d4.css" title="light">
 
     
 </head>
@@ -45,7 +45,10 @@
 
     <div class="ember-load-indicator">
         <div class="gh-loading-content">
-            <div class="gh-loading-spinner"></div>
+            <video width="100" height="100" loop="" autoplay="" muted="" playsinline="" preload="metadata">
+                <source src="assets/videos/logo-loader.mp4" type="video/mp4" />
+                <div class="gh-loading-spinner"></div>
+            </video>
         </div>
     </div>
 
@@ -53,9 +56,9 @@
 
     <div id="ember-basic-dropdown-wormhole"></div>
 
-    <script src="assets/vendor-eb76d0236a09b8b6f44675dba45b1fc6.js"></script>
-<script src="assets/chunk.579.2de3f4300baf25f9a0db.js"></script>
-<script src="assets/chunk.143.a5ef705453da0d58b75a.js"></script>
-    <script src="assets/ghost-8919656440ad4617a07bb31069b1f71b.js"></script>
+    <script src="assets/vendor-b2375e2f383cbc3fd73340c4b656c993.js"></script>
+<script src="assets/chunk.579.d14c3688558f34afeb3e.js"></script>
+<script src="assets/chunk.143.a281d460e6059cd0210a.js"></script>
+    <script src="assets/ghost-f2bf99b26aee662cf37fe59f87b1ceb5.js"></script>
 </body>
 </html>

package/core/frontend/helpers/search.js

@@ -1,9 +1,8 @@
 // # search helper
 
 const {SafeString} = require('../services/handlebars');
-const {labs} = require('../services/proxy');
 
-function search() {
+module.exports = function search() {
     // We want this to output as one line, but splitting for readability
     const svg = '<button class="gh-search-icon" aria-label="search" data-ghost-search '
               + 'style="display: inline-flex; justify-content: center; align-items: center; width: 32px; height: 32px; padding: 0; border: 0; color: inherit; background-color: transparent; cursor: pointer; outline: none;">'
@@ -11,17 +10,4 @@ function search() {
               + '<path d="M10 3a7 7 0 1 0 0 14 7 7 0 0 0 0-14Zm-9 7a9 9 0 1 1 18 0 9 9 0 0 1-18 0Z" fill="currentColor"/></svg></button>';
 
     return new SafeString(svg);
-}
-
-module.exports = function searchLabsWrapper() {
-    let self = this;
-    let args = arguments;
-
-    return labs.enabledHelper({
-        flagKey: 'searchHelper',
-        flagName: 'Search helper',
-        helperName: 'search'
-    }, () => {
-        return search.apply(self, args); // eslint-disable-line camelcase
-    });
 };

package/core/frontend/src/member-attribution/member-attribution.js

@@ -15,6 +15,11 @@ const LIMIT = 15;
 //         "path": "/about/"
 //     },
 //     {
+//         "time": 12341234,
+//         "id": "manually-added-id",
+//         "type": "post",
+//     },
+//     {
 //         "time": 12341235,
 //         "path": "/welcome/"
 //     }
@@ -57,7 +62,7 @@ const LIMIT = 15;
             // Valid item (so all following items are also valid by definition)
             return true;
         });
-        
+
         if (firstNotExpiredIndex > 0) {
             // Remove until the first valid item
             history.splice(0, firstNotExpiredIndex);
@@ -66,17 +71,73 @@ const LIMIT = 15;
             history = [];
         }
 
+        // Fetch referrer data from query params
+        let refParam;
+        let sourceParam;
+        let utmSourceParam;
+        let utmMediumParam;
+        try {
+            // Fetch source/medium from query param
+            const url = new URL(window.location.href);
+            refParam = url.searchParams.get('ref');
+            sourceParam = url.searchParams.get('source');
+            utmSourceParam = url.searchParams.get('utm_source');
+            utmMediumParam = url.searchParams.get('utm_medium');
+        } catch (e) {
+            console.error('[Member Attribution] Parsing referrer from querystring failed', e);
+        }
+
+        const refSource = refParam || sourceParam || utmSourceParam || null;
+        const refMedium = utmMediumParam || null;
+        const refUrl = window.document.referrer || null;
+
+        // Do we have attributions in the query string?
+        try {
+            const url = new URL(window.location.href);
+            const params = url.searchParams;
+            if (params.get('attribution_id') && params.get('attribution_type')) {
+                // Add attribution to history before the current path
+                history.push({
+                    time: currentTime,
+                    id: params.get('attribution_id'),
+                    type: params.get('attribution_type'),
+                    refSource,
+                    refMedium,
+                    refUrl
+                });
+
+                // Remove attribution from query string
+                params.delete('attribution_id');
+                params.delete('attribution_type');
+                url.search = '?' + params.toString();
+                window.history.replaceState({}, '', `${url.pathname}${url.search}${url.hash}`);
+            }
+        } catch (error) {
+            console.error('[Member Attribution] Parsing attribution from querystring failed', error);
+        }
+
         const currentPath = window.location.pathname;
 
         if (history.length === 0 || history[history.length - 1].path !== currentPath) {
             history.push({
                 path: currentPath,
-                time: currentTime
+                time: currentTime,
+                refSource,
+                refMedium,
+                refUrl
             });
         } else if (history.length > 0) {
             history[history.length - 1].time = currentTime;
+            // Update referrer information for same path if available (e.g. when opening a link on same path via external referrer)
+            if (refSource) {
+                history[history.length - 1].refSource = refSource;
+                history[history.length - 1].refMedium = refMedium;
+            }
+            if (refUrl) {
+                history[history.length - 1].refUrl = refUrl;
+            }
         }
-        
+
         // Restrict length
         if (history.length > LIMIT) {
             history = history.slice(-LIMIT);

package/core/frontend/web/site.js

@@ -14,7 +14,8 @@ const themeEngine = require('../services/theme-engine');
 const themeMiddleware = themeEngine.middleware;
 const membersService = require('../../server/services/members');
 const offersService = require('../../server/services/offers');
-const customRedirects = require('../../server/services/redirects');
+const customRedirects = require('../../server/services/custom-redirects');
+const linkRedirects = require('../../server/services/link-redirection');
 const siteRoutes = require('./routes');
 const shared = require('../../server/web/shared');
 const errorHandler = require('@tryghost/mw-error-handler');
@@ -49,6 +50,8 @@ module.exports = function setupSiteApp(routerConfig) {
 
     siteApp.use(offersService.middleware);
 
+    siteApp.use(linkRedirects.service.handleRequest);
+
     // you can extend Ghost with a custom redirects file
     // see https://github.com/TryGhost/Ghost/issues/7707
     siteApp.use(customRedirects.middleware);
@@ -78,11 +81,11 @@ module.exports = function setupSiteApp(routerConfig) {
     // Member attribution
     siteApp.use(mw.servePublicFile('built', 'public/member-attribution.min.js', 'application/javascript', constants.ONE_YEAR_S));
 
-    // Serve blog images using the storage adapter
+    // Serve site images using the storage adapter
     siteApp.use(STATIC_IMAGE_URL_PREFIX, mw.handleImageSizes, storage.getStorage('images').serve());
-    // Serve blog media using the storage adapter
+    // Serve site media using the storage adapter
     siteApp.use(STATIC_MEDIA_URL_PREFIX, storage.getStorage('media').serve());
-    // Serve blog files using the storage adapter
+    // Serve site files using the storage adapter
     siteApp.use(STATIC_FILES_URL_PREFIX, storage.getStorage('files').serve());
 
     // Global handling for member session, ensures a member is logged in to the frontend
@@ -91,7 +94,7 @@ module.exports = function setupSiteApp(routerConfig) {
     // /member/.well-known/* serves files (e.g. jwks.json) so it needs to be mounted before the prettyUrl mw to avoid trailing slashes
     siteApp.use(
         '/members/.well-known',
-        shared.middleware.cacheControl('public', {maxAge: 60 * 60 * 24}),
+        shared.middleware.cacheControl('public', {maxAge: constants.ONE_DAY_S}),
         (req, res, next) => membersService.api.middleware.wellKnown(req, res, next)
     );
 
@@ -127,7 +130,7 @@ module.exports = function setupSiteApp(routerConfig) {
 
     // ### Caching
     siteApp.use(function (req, res, next) {
-        // Site frontend is cacheable UNLESS request made by a member or blog is in private mode
+        // Site frontend is cacheable UNLESS request made by a member or site is in private mode
         if (req.member || res.isPrivateBlog) {
             return shared.middleware.cacheControl('private')(req, res, next);
         } else {
@@ -148,7 +151,7 @@ module.exports = function setupSiteApp(routerConfig) {
     router = siteRoutes(routerConfig);
     Object.setPrototypeOf(SiteRouter, router);
 
-    // Set up Frontend routes (including private blogging routes)
+    // Set up Frontend routes (including private site routes)
     siteApp.use(SiteRouter);
 
     // ### Error handlers

package/core/server/api/endpoints/index.js

@@ -185,6 +185,10 @@ module.exports = {
         return apiFramework.pipeline(require('./comments'), localUtils);
     },
 
+    get links() {
+        return apiFramework.pipeline(require('./links'), localUtils);
+    },
+
     /**
      * Content API Controllers
      *

package/core/server/api/endpoints/links.js

@@ -0,0 +1,25 @@
+const linkTrackingService = require('../../services/link-tracking');
+
+module.exports = {
+    docName: 'links',
+    browse: {
+        options: [
+            'filter'
+        ],
+        permissions: false,
+        async query(frame) {
+            const links = await linkTrackingService.service.getLinks(frame.options);
+
+            return {
+                data: links,
+                meta: {
+                    pagination: {
+                        total: links.length,
+                        page: 1,
+                        pages: 1
+                    }
+                }
+            };
+        }
+    }
+};

package/core/server/api/endpoints/posts.js

@@ -10,7 +10,8 @@ const allowedIncludes = [
     'tiers',
     'newsletter',
     'count.signups',
-    'count.conversions'
+    'count.conversions',
+    'count.clicks'
 ];
 const unsafeAttrs = ['status', 'authors', 'visibility'];
 

package/core/server/api/endpoints/redirects.js

@@ -1,6 +1,6 @@
 const path = require('path');
 
-const redirects = require('../../services/redirects');
+const customRedirects = require('../../services/custom-redirects');
 
 module.exports = {
     docName: 'redirects',
@@ -10,11 +10,9 @@ module.exports = {
             disposition: {
                 type: 'file',
                 value() {
-                    return redirects.api.getRedirectsFilePath()
+                    return customRedirects.api.getRedirectsFilePath()
                         .then((filePath) => {
-                            // TODO: Default file type is .json for backward compatibility.
-                            // When .yaml becomes default or .json is removed at v4,
-                            // This part should be changed.
+                            // @deprecated: .json was deprecated in v4.0 but is still the default for backwards compat
                             return filePath === null || path.extname(filePath) === '.json'
                                 ? 'redirects.json'
                                 : 'redirects.yaml';
@@ -25,13 +23,13 @@ module.exports = {
         permissions: true,
         response: {
             async format() {
-                const filePath = await redirects.api.getRedirectsFilePath();
+                const filePath = await customRedirects.api.getRedirectsFilePath();
 
                 return filePath === null || path.extname(filePath) === '.json' ? 'json' : 'plain';
             }
         },
         query() {
-            return redirects.api.get();
+            return customRedirects.api.get();
         }
     },
 
@@ -41,7 +39,7 @@ module.exports = {
             cacheInvalidate: true
         },
         query(frame) {
-            return redirects.api.setFromFilePath(frame.file.path, frame.file.ext);
+            return customRedirects.api.setFromFilePath(frame.file.path, frame.file.ext);
         }
     }
 };

package/core/server/api/endpoints/stats.js

@@ -28,5 +28,29 @@ module.exports = {
         async query() {
             return await statsService.getSubscriptionCountHistory();
         }
+    },
+    postReferrers: {
+        data: [
+            'id'
+        ],
+        permissions: {
+            docName: 'posts',
+            method: 'browse'
+        },
+        async query(frame) {
+            return await statsService.getPostReferrers(frame.data.id);
+        }
+    },
+    referrersHistory: {
+        data: [
+            'id'
+        ],
+        permissions: {
+            docName: 'posts',
+            method: 'browse'
+        },
+        async query() {
+            return await statsService.getReferrersHistory();
+        }
     }
 };

package/core/server/api/endpoints/utils/permissions.js

@@ -93,22 +93,8 @@ module.exports = {
 
         // CASE: Content API access
         if (frame.options.context.public && frame.apiType !== 'comments') {
-            debug('check content permissions');
-
-            // @TODO: Remove when we drop v0.1
-            // @TODO: https://github.com/TryGhost/Ghost/issues/10733
-            return permissions.applyPublicRules(apiConfig.docName, apiConfig.method, {
-                status: frame.options.status,
-                id: frame.options.id,
-                uuid: frame.options.uuid,
-                slug: frame.options.slug,
-                data: {
-                    status: frame.data.status,
-                    id: frame.data.id,
-                    uuid: frame.data.uuid,
-                    slug: frame.data.slug
-                }
-            });
+            debug('content api permissions pass-through');
+            return Promise.resolve(frame.options);
         }
 
         return nonePublicAuth(apiConfig, frame);

package/core/server/api/endpoints/utils/serializers/input/pages.js

@@ -7,10 +7,10 @@ const localUtils = require('../../index');
 const postsMetaSchema = require('../../../../../data/schema').tables.posts_meta;
 const clean = require('./utils/clean');
 
-function removeMobiledocFormat(frame) {
-    if (frame.options.formats && frame.options.formats.includes('mobiledoc')) {
+function removeSourceFormats(frame) {
+    if (frame.options.formats?.includes('mobiledoc') || frame.options.formats?.includes('lexical')) {
         frame.options.formats = frame.options.formats.filter((format) => {
-            return (format !== 'mobiledoc');
+            return !['mobiledoc', 'lexical'].includes(format);
         });
     }
 }
@@ -95,7 +95,7 @@ module.exports = {
         forcePageFilter(frame);
 
         if (localUtils.isContentAPI(frame)) {
-            removeMobiledocFormat(frame);
+            removeSourceFormats(frame);
             setDefaultOrder(frame);
             forceVisibilityColumn(frame);
         }
@@ -113,7 +113,7 @@ module.exports = {
         forcePageFilter(frame);
 
         if (localUtils.isContentAPI(frame)) {
-            removeMobiledocFormat(frame);
+            removeSourceFormats(frame);
             setDefaultOrder(frame);
             forceVisibilityColumn(frame);
         }

package/core/server/api/endpoints/utils/serializers/input/posts.js

@@ -6,11 +6,12 @@ const localUtils = require('../../index');
 const mobiledoc = require('../../../../../lib/mobiledoc');
 const postsMetaSchema = require('../../../../../data/schema').tables.posts_meta;
 const clean = require('./utils/clean');
+const labs = require('../../../../../../shared/labs');
 
-function removeMobiledocFormat(frame) {
-    if (frame.options.formats && frame.options.formats.includes('mobiledoc')) {
+function removeSourceFormats(frame) {
+    if (frame.options.formats?.includes('mobiledoc') || frame.options.formats?.includes('lexical')) {
         frame.options.formats = frame.options.formats.filter((format) => {
-            return (format !== 'mobiledoc');
+            return !['mobiledoc', 'lexical'].includes(format);
         });
     }
 }
@@ -24,7 +25,11 @@ function defaultRelations(frame) {
         return false;
     }
 
-    frame.options.withRelated = ['tags', 'authors', 'authors.roles', 'email', 'tiers', 'newsletter', 'count.signups', 'count.conversions'];
+    if (labs.isSet('emailClicks')) {
+        frame.options.withRelated = ['tags', 'authors', 'authors.roles', 'email', 'tiers', 'newsletter', 'count.signups', 'count.conversions', 'count.clicks'];
+    } else {
+        frame.options.withRelated = ['tags', 'authors', 'authors.roles', 'email', 'tiers', 'newsletter', 'count.signups', 'count.conversions'];
+    }
 }
 
 function setDefaultOrder(frame) {
@@ -101,8 +106,8 @@ module.exports = {
          * - user exists? admin api access
          */
         if (localUtils.isContentAPI(frame)) {
-            // CASE: the content api endpoint for posts should not return mobiledoc
-            removeMobiledocFormat(frame);
+            // CASE: the content api endpoint for posts should not return mobiledoc or lexical
+            removeSourceFormats(frame);
 
             setDefaultOrder(frame);
             forceVisibilityColumn(frame);
@@ -127,8 +132,8 @@ module.exports = {
          * - user exists? admin api access
          */
         if (localUtils.isContentAPI(frame)) {
-            // CASE: the content api endpoint for posts should not return mobiledoc
-            removeMobiledocFormat(frame);
+            // CASE: the content api endpoint for posts should not return mobiledoc or lexical
+            removeSourceFormats(frame);
 
             setDefaultOrder(frame);
             forceVisibilityColumn(frame);

package/core/server/api/endpoints/utils/serializers/input/settings.js

@@ -47,6 +47,7 @@ const EDITABLE_SETTINGS = [
     'mailgun_domain',
     'mailgun_base_url',
     'email_track_opens',
+    'email_track_clicks',
     'amp',
     'amp_gtag_id',
     'slack_url',

package/core/server/api/endpoints/utils/serializers/output/mappers/activity-feed-events.js

@@ -1,4 +1,6 @@
 const mapComment = require('./comments');
+const url = require('../utils/url');
+const _ = require('lodash');
 
 const commentEventMapper = (json, frame) => {
     return {
@@ -7,10 +9,59 @@ const commentEventMapper = (json, frame) => {
     };
 };
 
+const clickEventMapper = (json, frame) => {
+    const memberFields = [
+        'id',
+        'uuid',
+        'name',
+        'email',
+        'avatar_image'
+    ];
+
+    const linkFields = [
+        'from',
+        'to'
+    ];
+
+    const postFields = [
+        'id',
+        'uuid',
+        'title',
+        'url'
+    ];
+
+    const data = json.data;
+    const response = {};
+
+    if (data.link && data.link.post) {
+        // We could use the post mapper here, but we need less field + don't need al the async behavior support
+        url.forPost(data.link.post.id, data.link.post, frame);
+        response.post = _.pick(data.link.post, postFields);
+    }
+
+    if (data.link) {
+        response.link = _.pick(data.link, linkFields);
+    }
+
+    if (data.member) {
+        response.member = _.pick(data.member, memberFields);
+    } else {
+        response.member = null;
+    }
+
+    return {
+        ...json,
+        data: response
+    };
+};
+
 const activityFeedMapper = (event, frame) => {
     if (event.type === 'comment_event') {
         return commentEventMapper(event, frame);
     }
+    if (event.type === 'click_event') {
+        return clickEventMapper(event, frame);
+    }
     return event;
 };
 

package/core/server/api/endpoints/utils/serializers/output/mappers/comments.js

@@ -18,6 +18,15 @@ const memberFields = [
     'avatar_image'
 ];
 
+const memberFieldsAdmin = [
+    'id',
+    'uuid',
+    'name',
+    'email',
+    'expertise',
+    'avatar_image'
+];
+
 const postFields = [
     'id',
     'uuid',
@@ -36,7 +45,7 @@ const commentMapper = (model, frame) => {
     const response = _.pick(jsonModel, commentFields);
 
     if (jsonModel.member) {
-        response.member = _.pick(jsonModel.member, memberFields);
+        response.member = _.pick(jsonModel.member, utils.isMembersAPI(frame) ? memberFields : memberFieldsAdmin);
     } else {
         response.member = null;
     }

package/core/server/api/endpoints/utils/serializers/output/mappers/posts.js

@@ -110,7 +110,7 @@ module.exports = async (model, frame, options = {}) => {
         });
     }
 
-    if (!labs.isSet('memberAttribution')) {
+    if (!labs.isSet('memberAttribution') && !labs.isSet('emailClicks')) {
         delete jsonModel.count;
     }
 

package/core/server/api/endpoints/utils/validators/input/pages.js

@@ -4,7 +4,8 @@ const {ValidationError} = require('@tryghost/errors');
 const tpl = require('@tryghost/tpl');
 
 const messages = {
-    invalidVisibilityFilter: 'Invalid filter in visibility_filter property'
+    invalidVisibilityFilter: 'Invalid filter in visibility_filter property',
+    onlySingleContentSource: 'It\'s only possible to save mobiledoc or lexical properties, not both'
 };
 
 const validateVisibility = async function (frame) {
@@ -33,15 +34,29 @@ const validateVisibility = async function (frame) {
     }
 };
 
+const validateSingleContentSource = async function (frame) {
+    if (!frame.data.pages?.[0]) {
+        return;
+    }
+
+    const [page] = frame.data.pages;
+    if (page.mobiledoc && page.lexical) {
+        return Promise.reject(new ValidationError({
+            message: tpl(messages.onlySingleContentSource),
+            property: 'lexical'
+        }));
+    }
+};
+
 module.exports = {
-    add(apiConfig, frame) {
-        return jsonSchema.validate(...arguments).then(() => {
-            return validateVisibility(frame);
-        });
+    async add(apiConfig, frame) {
+        await jsonSchema.validate(...arguments);
+        await validateVisibility(frame);
+        await validateSingleContentSource(frame);
     },
-    edit(apiConfig, frame) {
-        return jsonSchema.validate(...arguments).then(() => {
-            return validateVisibility(frame);
-        });
+    async edit(apiConfig, frame) {
+        await jsonSchema.validate(...arguments);
+        await validateVisibility(frame);
+        await validateSingleContentSource(frame);
     }
 };