ghost 5.89.4 → 5.89.6

package/core/built/admin/assets/{chunk.524.88e372a782fa17c3d612.js → chunk.524.c121fa5c220befde8234.js}

@@ -10,8 +10,8 @@ function s(e){var r=o(e)
 return t(r)}function o(e){if(!t.o(n,e)){var r=new Error("Cannot find module '"+e+"'")
 throw r.code="MODULE_NOT_FOUND",r}return n[e]}s.keys=function(){return Object.keys(n)},s.resolve=o,e.exports=s,s.id=56857},32186:e=>{"use strict"
 e.exports=require("@ember/test-waiters")},80032:e=>{"use strict"
-e.exports=require("ember-tracked-storage-polyfill")},17809:()=>{},86625:()=>{},88256:(e,r,t)=>{e.exports=function(){var e=_eai_d,r=_eai_r
-function n(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?r("_eai_dyn_"+e):r("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return r("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@sentry/browser",[],(function(){return n(t(51294))})),e("@sentry/core",[],(function(){return n(t(16154))})),e("@sentry/integrations",[],(function(){return n(t(20080))})),e("@sentry/replay",[],(function(){return n(t(51633))})),e("@sentry/utils",[],(function(){return n(t(88414))})),e("@tryghost/color-utils",[],(function(){return n(t(86797))})),e("@tryghost/kg-clean-basic-html",[],(function(){return n(t(3414))})),e("@tryghost/kg-converters",[],(function(){return n(t(23075))})),e("@tryghost/limit-service",[],(function(){return n(t(55983))})),e("@tryghost/members-csv/lib/unparse",[],(function(){return n(t(9589))})),e("@tryghost/nql",[],(function(){return n(t(39365))})),e("@tryghost/nql-lang",[],(function(){return n(t(716))})),e("@tryghost/string",[],(function(){return n(t(96107))})),e("@tryghost/timezone-data",[],(function(){return n(t(27019))})),e("element-resize-detector",[],(function(){return n(t(29540))})),e("ember-css-transitions/modifiers/css-transition",["@ember/test-waiters"],(function(){return n(t(67946))})),e("ember-keyboard/helpers/if-key.js",[],(function(){return n(t(10530))})),e("ember-keyboard/helpers/on-key.js",[],(function(){return n(t(13692))})),e("ember-keyboard/modifiers/on-key.js",[],(function(){return n(t(40985))})),e("ember-keyboard/services/keyboard.js",[],(function(){return n(t(89697))})),e("ember-modifier",[],(function(){return n(t(37777))})),e("ember-moment/helpers/-base.js",[],(function(){return n(t(91366))})),e("ember-moment/helpers/is-after.js",[],(function(){return n(t(91461))})),e("ember-moment/helpers/is-before.js",[],(function(){return n(t(61e3))})),e("ember-moment/helpers/is-between.js",[],(function(){return n(t(447))})),e("ember-moment/helpers/is-same-or-after.js",[],(function(){return n(t(7916))})),e("ember-moment/helpers/is-same-or-before.js",[],(function(){return n(t(54351))})),e("ember-moment/helpers/is-same.js",[],(function(){return n(t(64193))})),e("ember-moment/helpers/moment-add.js",[],(function(){return n(t(50080))})),e("ember-moment/helpers/moment-calendar.js",[],(function(){return n(t(96625))})),e("ember-moment/helpers/moment-diff.js",[],(function(){return n(t(85340))})),e("ember-moment/helpers/moment-duration.js",[],(function(){return n(t(42967))})),e("ember-moment/helpers/moment-format.js",[],(function(){return n(t(10536))})),e("ember-moment/helpers/moment-from-now.js",[],(function(){return n(t(706))})),e("ember-moment/helpers/moment-from.js",[],(function(){return n(t(50727))})),e("ember-moment/helpers/moment-subtract.js",[],(function(){return n(t(54651))})),e("ember-moment/helpers/moment-to-date.js",[],(function(){return n(t(81183))})),e("ember-moment/helpers/moment-to-now.js",[],(function(){return n(t(17083))})),e("ember-moment/helpers/moment-to.js",[],(function(){return n(t(84818))})),e("ember-moment/helpers/moment.js",[],(function(){return n(t(41678))})),e("ember-moment/helpers/now.js",[],(function(){return n(t(34980))})),e("ember-moment/helpers/unix.js",[],(function(){return n(t(79272))})),e("ember-moment/helpers/utc.js",[],(function(){return n(t(36022))})),e("ember-moment/services/moment.js",[],(function(){return n(t(39879))})),e("fast-deep-equal",[],(function(){return n(t(25383))})),e("flexsearch",[],(function(){return n(t(37991))})),e("focus-trap",[],(function(){return n(t(39632))})),e("intersection-observer-admin",[],(function(){return n(t(21431))})),e("jose",[],(function(){return n(t(82765))})),e("moment-timezone",[],(function(){return n(t(41101))})),e("papaparse",[],(function(){return n(t(78695))})),e("raf-pool",[],(function(){return n(t(60695))})),e("react",[],(function(){return n(t(72854))})),e("react-dom",[],(function(){return n(t(95303))})),e("react-dom/client",[],(function(){return n(t(70816))})),e("semver/functions/coerce",[],(function(){return n(t(18576))})),e("semver/functions/lt",[],(function(){return n(t(32817))})),e("semver/functions/parse",[],(function(){return n(t(47898))})),e("tooltip.js",[],(function(){return n(t(85557))})),e("tracked-built-ins",["ember-tracked-storage-polyfill"],(function(){return n(t(77151))})),e("validator",[],(function(){return n(t(29119))})),e("_eai_dyn_@sentry/browser",[],(function(){return Promise.resolve().then(t.bind(t,51294))}))}()},60381:function(e,r){window._eai_r=require,window._eai_d=define}},t={}
+e.exports=require("ember-tracked-storage-polyfill")},17809:()=>{},86625:()=>{},25599:(e,r,t)=>{e.exports=function(){var e=_eai_d,r=_eai_r
+function n(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?r("_eai_dyn_"+e):r("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return r("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@sentry/browser",[],(function(){return n(t(51294))})),e("@sentry/core",[],(function(){return n(t(16154))})),e("@sentry/integrations",[],(function(){return n(t(20080))})),e("@sentry/replay",[],(function(){return n(t(51633))})),e("@sentry/utils",[],(function(){return n(t(88414))})),e("@tryghost/color-utils",[],(function(){return n(t(86797))})),e("@tryghost/kg-clean-basic-html",[],(function(){return n(t(3414))})),e("@tryghost/kg-converters",[],(function(){return n(t(23075))})),e("@tryghost/limit-service",[],(function(){return n(t(55983))})),e("@tryghost/members-csv/lib/unparse",[],(function(){return n(t(9589))})),e("@tryghost/nql",[],(function(){return n(t(39365))})),e("@tryghost/nql-lang",[],(function(){return n(t(716))})),e("@tryghost/string",[],(function(){return n(t(96107))})),e("@tryghost/timezone-data",[],(function(){return n(t(27019))})),e("element-resize-detector",[],(function(){return n(t(29540))})),e("ember-css-transitions/modifiers/css-transition",["@ember/test-waiters"],(function(){return n(t(67946))})),e("ember-keyboard/helpers/if-key.js",[],(function(){return n(t(10530))})),e("ember-keyboard/helpers/on-key.js",[],(function(){return n(t(13692))})),e("ember-keyboard/modifiers/on-key.js",[],(function(){return n(t(40985))})),e("ember-keyboard/services/keyboard.js",[],(function(){return n(t(89697))})),e("ember-modifier",[],(function(){return n(t(37777))})),e("ember-moment/helpers/-base.js",[],(function(){return n(t(91366))})),e("ember-moment/helpers/is-after.js",[],(function(){return n(t(91461))})),e("ember-moment/helpers/is-before.js",[],(function(){return n(t(61e3))})),e("ember-moment/helpers/is-between.js",[],(function(){return n(t(447))})),e("ember-moment/helpers/is-same-or-after.js",[],(function(){return n(t(7916))})),e("ember-moment/helpers/is-same-or-before.js",[],(function(){return n(t(54351))})),e("ember-moment/helpers/is-same.js",[],(function(){return n(t(64193))})),e("ember-moment/helpers/moment-add.js",[],(function(){return n(t(50080))})),e("ember-moment/helpers/moment-calendar.js",[],(function(){return n(t(96625))})),e("ember-moment/helpers/moment-diff.js",[],(function(){return n(t(85340))})),e("ember-moment/helpers/moment-duration.js",[],(function(){return n(t(42967))})),e("ember-moment/helpers/moment-format.js",[],(function(){return n(t(10536))})),e("ember-moment/helpers/moment-from-now.js",[],(function(){return n(t(706))})),e("ember-moment/helpers/moment-from.js",[],(function(){return n(t(50727))})),e("ember-moment/helpers/moment-subtract.js",[],(function(){return n(t(54651))})),e("ember-moment/helpers/moment-to-date.js",[],(function(){return n(t(81183))})),e("ember-moment/helpers/moment-to-now.js",[],(function(){return n(t(17083))})),e("ember-moment/helpers/moment-to.js",[],(function(){return n(t(84818))})),e("ember-moment/helpers/moment.js",[],(function(){return n(t(41678))})),e("ember-moment/helpers/now.js",[],(function(){return n(t(34980))})),e("ember-moment/helpers/unix.js",[],(function(){return n(t(79272))})),e("ember-moment/helpers/utc.js",[],(function(){return n(t(36022))})),e("ember-moment/services/moment.js",[],(function(){return n(t(39879))})),e("fast-deep-equal",[],(function(){return n(t(25383))})),e("flexsearch",[],(function(){return n(t(37991))})),e("focus-trap",[],(function(){return n(t(39632))})),e("intersection-observer-admin",[],(function(){return n(t(21431))})),e("jose",[],(function(){return n(t(82765))})),e("moment-timezone",[],(function(){return n(t(41101))})),e("papaparse",[],(function(){return n(t(78695))})),e("raf-pool",[],(function(){return n(t(60695))})),e("react",[],(function(){return n(t(72854))})),e("react-dom",[],(function(){return n(t(95303))})),e("react-dom/client",[],(function(){return n(t(70816))})),e("semver/functions/coerce",[],(function(){return n(t(18576))})),e("semver/functions/lt",[],(function(){return n(t(32817))})),e("semver/functions/parse",[],(function(){return n(t(47898))})),e("tooltip.js",[],(function(){return n(t(85557))})),e("tracked-built-ins",["ember-tracked-storage-polyfill"],(function(){return n(t(77151))})),e("validator",[],(function(){return n(t(29119))})),e("_eai_dyn_@sentry/browser",[],(function(){return Promise.resolve().then(t.bind(t,51294))}))}()},89906:function(e,r){window._eai_r=require,window._eai_d=define}},t={}
 function n(e){var s=t[e]
 if(void 0!==s)return s.exports
 var o=t[e]={id:e,loaded:!1,exports:{}}
@@ -28,8 +28,8 @@ var r=(r,t)=>{var s,o,[i,u,m]=t,a=0
 if(i.some((r=>0!==e[r]))){for(s in u)n.o(u,s)&&(n.m[s]=u[s])
 if(m)var c=m(n)}for(r&&r(t);a<i.length;a++)o=i[a],n.o(e,o)&&e[o]&&e[o][0](),e[o]=0
 return n.O(c)},t=globalThis.webpackChunk_ember_auto_import_=globalThis.webpackChunk_ember_auto_import_||[]
-t.forEach(r.bind(null,0)),t.push=r.bind(null,t.push.bind(t))})(),n.O(void 0,[42],(()=>n(n.s=60381)))
-var s=n.O(void 0,[42],(()=>n(n.s=88256)))
+t.forEach(r.bind(null,0)),t.push=r.bind(null,t.push.bind(t))})(),n.O(void 0,[42],(()=>n(n.s=89906)))
+var s=n.O(void 0,[42],(()=>n(n.s=25599)))
 s=n.O(s),__ember_auto_import__=s})()
 
-//# sourceMappingURL=chunk.524.88e372a782fa17c3d612.map
+//# sourceMappingURL=chunk.524.c121fa5c220befde8234.map

package/core/built/admin/assets/{chunk.582.5ec6b0a101a25ad210d8.js → chunk.582.78f1ec44751f5313fcc9.js}

@@ -10,10 +10,10 @@ function s(e){var r=o(e)
 return t(r)}function o(e){if(!t.o(n,e)){var r=new Error("Cannot find module '"+e+"'")
 throw r.code="MODULE_NOT_FOUND",r}return n[e]}s.keys=function(){return Object.keys(n)},s.resolve=o,e.exports=s,s.id=56857},32186:e=>{"use strict"
 e.exports=require("@ember/test-waiters")},80032:e=>{"use strict"
-e.exports=require("ember-tracked-storage-polyfill")},17809:()=>{},86625:()=>{},88256:(e,r,t)=>{e.exports=function(){var e=_eai_d,r=_eai_r
-function n(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?r("_eai_dyn_"+e):r("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return r("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@sentry/browser",EAI_DISCOVERED_EXTERNALS("@sentry/browser"),(function(){return n(t(51294))})),e("@sentry/core",EAI_DISCOVERED_EXTERNALS("@sentry/core"),(function(){return n(t(16154))})),e("@sentry/integrations",EAI_DISCOVERED_EXTERNALS("@sentry/integrations"),(function(){return n(t(20080))})),e("@sentry/replay",EAI_DISCOVERED_EXTERNALS("@sentry/replay"),(function(){return n(t(51633))})),e("@sentry/utils",EAI_DISCOVERED_EXTERNALS("@sentry/utils"),(function(){return n(t(88414))})),e("@tryghost/color-utils",EAI_DISCOVERED_EXTERNALS("@tryghost/color-utils"),(function(){return n(t(86797))})),e("@tryghost/kg-clean-basic-html",EAI_DISCOVERED_EXTERNALS("@tryghost/kg-clean-basic-html"),(function(){return n(t(3414))})),e("@tryghost/kg-converters",EAI_DISCOVERED_EXTERNALS("@tryghost/kg-converters"),(function(){return n(t(23075))})),e("@tryghost/limit-service",EAI_DISCOVERED_EXTERNALS("@tryghost/limit-service"),(function(){return n(t(55983))})),e("@tryghost/members-csv/lib/unparse",EAI_DISCOVERED_EXTERNALS("@tryghost/members-csv/lib/unparse"),(function(){return n(t(9589))})),e("@tryghost/nql",EAI_DISCOVERED_EXTERNALS("@tryghost/nql"),(function(){return n(t(39365))})),e("@tryghost/nql-lang",EAI_DISCOVERED_EXTERNALS("@tryghost/nql-lang"),(function(){return n(t(716))})),e("@tryghost/string",EAI_DISCOVERED_EXTERNALS("@tryghost/string"),(function(){return n(t(96107))})),e("@tryghost/timezone-data",EAI_DISCOVERED_EXTERNALS("@tryghost/timezone-data"),(function(){return n(t(27019))})),e("element-resize-detector",EAI_DISCOVERED_EXTERNALS("element-resize-detector"),(function(){return n(t(29540))})),e("ember-css-transitions/modifiers/css-transition",EAI_DISCOVERED_EXTERNALS("ember-css-transitions/modifiers/css-transition"),(function(){return n(t(67946))})),e("ember-keyboard/helpers/if-key.js",EAI_DISCOVERED_EXTERNALS("ember-keyboard/helpers/if-key.js"),(function(){return n(t(10530))})),e("ember-keyboard/helpers/on-key.js",EAI_DISCOVERED_EXTERNALS("ember-keyboard/helpers/on-key.js"),(function(){return n(t(13692))})),e("ember-keyboard/modifiers/on-key.js",EAI_DISCOVERED_EXTERNALS("ember-keyboard/modifiers/on-key.js"),(function(){return n(t(40985))})),e("ember-keyboard/services/keyboard.js",EAI_DISCOVERED_EXTERNALS("ember-keyboard/services/keyboard.js"),(function(){return n(t(89697))})),e("ember-modifier",EAI_DISCOVERED_EXTERNALS("ember-modifier"),(function(){return n(t(37777))})),e("ember-moment/helpers/-base.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/-base.js"),(function(){return n(t(91366))})),e("ember-moment/helpers/is-after.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-after.js"),(function(){return n(t(91461))})),e("ember-moment/helpers/is-before.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-before.js"),(function(){return n(t(61e3))})),e("ember-moment/helpers/is-between.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-between.js"),(function(){return n(t(447))})),e("ember-moment/helpers/is-same-or-after.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-same-or-after.js"),(function(){return n(t(7916))})),e("ember-moment/helpers/is-same-or-before.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-same-or-before.js"),(function(){return n(t(54351))})),e("ember-moment/helpers/is-same.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-same.js"),(function(){return n(t(64193))})),e("ember-moment/helpers/moment-add.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-add.js"),(function(){return n(t(50080))})),e("ember-moment/helpers/moment-calendar.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-calendar.js"),(function(){return n(t(96625))})),e("ember-moment/helpers/moment-diff.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-diff.js"),(function(){return n(t(85340))})),e("ember-moment/helpers/moment-duration.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-duration.js"),(function(){return n(t(42967))})),e("ember-moment/helpers/moment-format.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-format.js"),(function(){return n(t(10536))})),e("ember-moment/helpers/moment-from-now.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-from-now.js"),(function(){return n(t(706))})),e("ember-moment/helpers/moment-from.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-from.js"),(function(){return n(t(50727))})),e("ember-moment/helpers/moment-subtract.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-subtract.js"),(function(){return n(t(54651))})),e("ember-moment/helpers/moment-to-date.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-to-date.js"),(function(){return n(t(81183))})),e("ember-moment/helpers/moment-to-now.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-to-now.js"),(function(){return n(t(17083))})),e("ember-moment/helpers/moment-to.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-to.js"),(function(){return n(t(84818))})),e("ember-moment/helpers/moment.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment.js"),(function(){return n(t(41678))})),e("ember-moment/helpers/now.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/now.js"),(function(){return n(t(34980))})),e("ember-moment/helpers/unix.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/unix.js"),(function(){return n(t(79272))})),e("ember-moment/helpers/utc.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/utc.js"),(function(){return n(t(36022))})),e("ember-moment/services/moment.js",EAI_DISCOVERED_EXTERNALS("ember-moment/services/moment.js"),(function(){return n(t(39879))})),e("fast-deep-equal",EAI_DISCOVERED_EXTERNALS("fast-deep-equal"),(function(){return n(t(25383))})),e("flexsearch",EAI_DISCOVERED_EXTERNALS("flexsearch"),(function(){return n(t(37991))})),e("focus-trap",EAI_DISCOVERED_EXTERNALS("focus-trap"),(function(){return n(t(39632))})),e("intersection-observer-admin",EAI_DISCOVERED_EXTERNALS("intersection-observer-admin"),(function(){return n(t(21431))})),e("jose",EAI_DISCOVERED_EXTERNALS("jose"),(function(){return n(t(82765))})),e("moment-timezone",EAI_DISCOVERED_EXTERNALS("moment-timezone"),(function(){return n(t(41101))})),e("papaparse",EAI_DISCOVERED_EXTERNALS("papaparse"),(function(){return n(t(78695))})),e("raf-pool",EAI_DISCOVERED_EXTERNALS("raf-pool"),(function(){return n(t(60695))})),e("react",EAI_DISCOVERED_EXTERNALS("react"),(function(){return n(t(72854))})),e("react-dom",EAI_DISCOVERED_EXTERNALS("react-dom"),(function(){return n(t(95303))})),e("react-dom/client",EAI_DISCOVERED_EXTERNALS("react-dom/client"),(function(){return n(t(70816))})),e("semver/functions/coerce",EAI_DISCOVERED_EXTERNALS("semver/functions/coerce"),(function(){return n(t(18576))})),e("semver/functions/lt",EAI_DISCOVERED_EXTERNALS("semver/functions/lt"),(function(){return n(t(32817))})),e("semver/functions/parse",EAI_DISCOVERED_EXTERNALS("semver/functions/parse"),(function(){return n(t(47898))})),e("tooltip.js",EAI_DISCOVERED_EXTERNALS("tooltip.js"),(function(){return n(t(85557))})),e("tracked-built-ins",EAI_DISCOVERED_EXTERNALS("tracked-built-ins"),(function(){return n(t(77151))})),e("validator",EAI_DISCOVERED_EXTERNALS("validator"),(function(){return n(t(29119))})),e("_eai_dyn_@sentry/browser",[],(function(){return Promise.resolve().then(t.bind(t,51294))}))}()},60381:function(e,r){window._eai_r=require,window._eai_d=define},42458:(e,r,t)=>{e.exports=function(){_eai_d
+e.exports=require("ember-tracked-storage-polyfill")},17809:()=>{},86625:()=>{},25599:(e,r,t)=>{e.exports=function(){var e=_eai_d,r=_eai_r
+function n(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?r("_eai_dyn_"+e):r("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return r("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@sentry/browser",EAI_DISCOVERED_EXTERNALS("@sentry/browser"),(function(){return n(t(51294))})),e("@sentry/core",EAI_DISCOVERED_EXTERNALS("@sentry/core"),(function(){return n(t(16154))})),e("@sentry/integrations",EAI_DISCOVERED_EXTERNALS("@sentry/integrations"),(function(){return n(t(20080))})),e("@sentry/replay",EAI_DISCOVERED_EXTERNALS("@sentry/replay"),(function(){return n(t(51633))})),e("@sentry/utils",EAI_DISCOVERED_EXTERNALS("@sentry/utils"),(function(){return n(t(88414))})),e("@tryghost/color-utils",EAI_DISCOVERED_EXTERNALS("@tryghost/color-utils"),(function(){return n(t(86797))})),e("@tryghost/kg-clean-basic-html",EAI_DISCOVERED_EXTERNALS("@tryghost/kg-clean-basic-html"),(function(){return n(t(3414))})),e("@tryghost/kg-converters",EAI_DISCOVERED_EXTERNALS("@tryghost/kg-converters"),(function(){return n(t(23075))})),e("@tryghost/limit-service",EAI_DISCOVERED_EXTERNALS("@tryghost/limit-service"),(function(){return n(t(55983))})),e("@tryghost/members-csv/lib/unparse",EAI_DISCOVERED_EXTERNALS("@tryghost/members-csv/lib/unparse"),(function(){return n(t(9589))})),e("@tryghost/nql",EAI_DISCOVERED_EXTERNALS("@tryghost/nql"),(function(){return n(t(39365))})),e("@tryghost/nql-lang",EAI_DISCOVERED_EXTERNALS("@tryghost/nql-lang"),(function(){return n(t(716))})),e("@tryghost/string",EAI_DISCOVERED_EXTERNALS("@tryghost/string"),(function(){return n(t(96107))})),e("@tryghost/timezone-data",EAI_DISCOVERED_EXTERNALS("@tryghost/timezone-data"),(function(){return n(t(27019))})),e("element-resize-detector",EAI_DISCOVERED_EXTERNALS("element-resize-detector"),(function(){return n(t(29540))})),e("ember-css-transitions/modifiers/css-transition",EAI_DISCOVERED_EXTERNALS("ember-css-transitions/modifiers/css-transition"),(function(){return n(t(67946))})),e("ember-keyboard/helpers/if-key.js",EAI_DISCOVERED_EXTERNALS("ember-keyboard/helpers/if-key.js"),(function(){return n(t(10530))})),e("ember-keyboard/helpers/on-key.js",EAI_DISCOVERED_EXTERNALS("ember-keyboard/helpers/on-key.js"),(function(){return n(t(13692))})),e("ember-keyboard/modifiers/on-key.js",EAI_DISCOVERED_EXTERNALS("ember-keyboard/modifiers/on-key.js"),(function(){return n(t(40985))})),e("ember-keyboard/services/keyboard.js",EAI_DISCOVERED_EXTERNALS("ember-keyboard/services/keyboard.js"),(function(){return n(t(89697))})),e("ember-modifier",EAI_DISCOVERED_EXTERNALS("ember-modifier"),(function(){return n(t(37777))})),e("ember-moment/helpers/-base.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/-base.js"),(function(){return n(t(91366))})),e("ember-moment/helpers/is-after.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-after.js"),(function(){return n(t(91461))})),e("ember-moment/helpers/is-before.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-before.js"),(function(){return n(t(61e3))})),e("ember-moment/helpers/is-between.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-between.js"),(function(){return n(t(447))})),e("ember-moment/helpers/is-same-or-after.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-same-or-after.js"),(function(){return n(t(7916))})),e("ember-moment/helpers/is-same-or-before.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-same-or-before.js"),(function(){return n(t(54351))})),e("ember-moment/helpers/is-same.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/is-same.js"),(function(){return n(t(64193))})),e("ember-moment/helpers/moment-add.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-add.js"),(function(){return n(t(50080))})),e("ember-moment/helpers/moment-calendar.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-calendar.js"),(function(){return n(t(96625))})),e("ember-moment/helpers/moment-diff.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-diff.js"),(function(){return n(t(85340))})),e("ember-moment/helpers/moment-duration.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-duration.js"),(function(){return n(t(42967))})),e("ember-moment/helpers/moment-format.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-format.js"),(function(){return n(t(10536))})),e("ember-moment/helpers/moment-from-now.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-from-now.js"),(function(){return n(t(706))})),e("ember-moment/helpers/moment-from.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-from.js"),(function(){return n(t(50727))})),e("ember-moment/helpers/moment-subtract.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-subtract.js"),(function(){return n(t(54651))})),e("ember-moment/helpers/moment-to-date.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-to-date.js"),(function(){return n(t(81183))})),e("ember-moment/helpers/moment-to-now.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-to-now.js"),(function(){return n(t(17083))})),e("ember-moment/helpers/moment-to.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment-to.js"),(function(){return n(t(84818))})),e("ember-moment/helpers/moment.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/moment.js"),(function(){return n(t(41678))})),e("ember-moment/helpers/now.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/now.js"),(function(){return n(t(34980))})),e("ember-moment/helpers/unix.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/unix.js"),(function(){return n(t(79272))})),e("ember-moment/helpers/utc.js",EAI_DISCOVERED_EXTERNALS("ember-moment/helpers/utc.js"),(function(){return n(t(36022))})),e("ember-moment/services/moment.js",EAI_DISCOVERED_EXTERNALS("ember-moment/services/moment.js"),(function(){return n(t(39879))})),e("fast-deep-equal",EAI_DISCOVERED_EXTERNALS("fast-deep-equal"),(function(){return n(t(25383))})),e("flexsearch",EAI_DISCOVERED_EXTERNALS("flexsearch"),(function(){return n(t(37991))})),e("focus-trap",EAI_DISCOVERED_EXTERNALS("focus-trap"),(function(){return n(t(39632))})),e("intersection-observer-admin",EAI_DISCOVERED_EXTERNALS("intersection-observer-admin"),(function(){return n(t(21431))})),e("jose",EAI_DISCOVERED_EXTERNALS("jose"),(function(){return n(t(82765))})),e("moment-timezone",EAI_DISCOVERED_EXTERNALS("moment-timezone"),(function(){return n(t(41101))})),e("papaparse",EAI_DISCOVERED_EXTERNALS("papaparse"),(function(){return n(t(78695))})),e("raf-pool",EAI_DISCOVERED_EXTERNALS("raf-pool"),(function(){return n(t(60695))})),e("react",EAI_DISCOVERED_EXTERNALS("react"),(function(){return n(t(72854))})),e("react-dom",EAI_DISCOVERED_EXTERNALS("react-dom"),(function(){return n(t(95303))})),e("react-dom/client",EAI_DISCOVERED_EXTERNALS("react-dom/client"),(function(){return n(t(70816))})),e("semver/functions/coerce",EAI_DISCOVERED_EXTERNALS("semver/functions/coerce"),(function(){return n(t(18576))})),e("semver/functions/lt",EAI_DISCOVERED_EXTERNALS("semver/functions/lt"),(function(){return n(t(32817))})),e("semver/functions/parse",EAI_DISCOVERED_EXTERNALS("semver/functions/parse"),(function(){return n(t(47898))})),e("tooltip.js",EAI_DISCOVERED_EXTERNALS("tooltip.js"),(function(){return n(t(85557))})),e("tracked-built-ins",EAI_DISCOVERED_EXTERNALS("tracked-built-ins"),(function(){return n(t(77151))})),e("validator",EAI_DISCOVERED_EXTERNALS("validator"),(function(){return n(t(29119))})),e("_eai_dyn_@sentry/browser",[],(function(){return Promise.resolve().then(t.bind(t,51294))}))}()},89906:function(e,r){window._eai_r=require,window._eai_d=define},97909:(e,r,t)=>{e.exports=function(){_eai_d
 var e=_eai_r
-window.emberAutoImportDynamic=function(r){return 1===arguments.length?e("_eai_dyn_"+r):e("_eai_dynt_"+r)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(r){return e("_eai_sync_"+r)(Array.prototype.slice.call(arguments,1))},t(88256)}()}},t={}
+window.emberAutoImportDynamic=function(r){return 1===arguments.length?e("_eai_dyn_"+r):e("_eai_dynt_"+r)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(r){return e("_eai_sync_"+r)(Array.prototype.slice.call(arguments,1))},t(25599)}()}},t={}
 function n(e){var s=t[e]
 if(void 0!==s)return s.exports
 var o=t[e]={id:e,loaded:!1,exports:{}}
@@ -30,8 +30,8 @@ var r=(r,t)=>{var s,o,[m,i,E]=t,a=0
 if(m.some((r=>0!==e[r]))){for(s in i)n.o(i,s)&&(n.m[s]=i[s])
 if(E)var u=E(n)}for(r&&r(t);a<m.length;a++)o=m[a],n.o(e,o)&&e[o]&&e[o][0](),e[o]=0
 return n.O(u)},t=globalThis.webpackChunk_ember_auto_import_=globalThis.webpackChunk_ember_auto_import_||[]
-t.forEach(r.bind(null,0)),t.push=r.bind(null,t.push.bind(t))})(),n.O(void 0,[42],(()=>n(n.s=60381)))
-var s=n.O(void 0,[42],(()=>n(n.s=42458)))
+t.forEach(r.bind(null,0)),t.push=r.bind(null,t.push.bind(t))})(),n.O(void 0,[42],(()=>n(n.s=89906)))
+var s=n.O(void 0,[42],(()=>n(n.s=97909)))
 s=n.O(s),__ember_auto_import__=s})()
 
-//# sourceMappingURL=chunk.582.5ec6b0a101a25ad210d8.map
+//# sourceMappingURL=chunk.582.78f1ec44751f5313fcc9.map

package/core/built/admin/assets/{ghost-7998cfd04d4b790bc8f7325d835775cb.js → ghost-532c38e4c3ecd17d68cdcc9fb58b9098.js}

@@ -1674,7 +1674,7 @@ if(r.length)return l(r),s(!1),i(100),null
 const n=[]
 for(let i=0;i<e.length;i+=1){const r=e[i]
 n.push(h(r,t))}try{const e=await Promise.all(n)
-return i(100),c.current.clear(),s(!1),l([]),e}catch(a){return console.error(a),l([...o,a]),s(!1),i(100),c.current.clear(),null}},errors:o,filesNumber:u}},u=this.feature.lexicalMultiplayer&&!s.post.isNew,d=("https:"===window.location.protocol?"wss:":"ws:")+window.location.host+this.ghostPaths.url.api("posts","multiplayer"),c=s.post.id,p=this.session.user.name,m=({isInitInstance:e})=>r.default.createElement("div",{"data-secondary-instance":!!e,style:e?{width:0,height:0,overflow:"hidden"}:{}},r.default.createElement(V,{editorResource:this.editorResource,cardConfig:s,enableMultiplayer:u,fileUploader:{useFileUpload:l,fileTypes:N},initialEditorState:this.args.lexical,multiplayerUsername:p,multiplayerDocId:c,multiplayerEndpoint:d,onError:this.onError,darkMode:this.feature.nightShift,isTKEnabled:!0},r.default.createElement(q,{editorResource:this.editorResource,cursorDidExitAtTop:e?null:this.args.cursorDidExitAtTop,placeholderText:e?null:this.args.placeholderText,darkMode:e?null:this.feature.nightShift,onChange:e?this.args.updateSecondaryInstanceModel:this.args.onChange,registerAPI:e?this.args.registerSecondaryAPI:this.args.registerAPI}),r.default.createElement($,{editorResource:this.editorResource,onChange:e?()=>{}:this.args.updateWordCount}),r.default.createElement(Y,{editorResource:this.editorResource,onChange:e?()=>{}:this.args.updatePostTkCount})))
+return i(100),c.current.clear(),s(!1),l([]),e}catch(a){return console.error(a),l([...o,a]),s(!1),i(100),c.current.clear(),null}},errors:o,filesNumber:u}},u=this.feature.lexicalMultiplayer&&!s.post.isNew,d=("https:"===window.location.protocol?"wss:":"ws:")+window.location.host+this.ghostPaths.url.api("posts","multiplayer"),c=s.post.id,p=this.session.user.name,m=({isInitInstance:e})=>r.default.createElement("div",{"data-secondary-instance":!!e,style:e?{display:"none"}:{}},r.default.createElement(V,{editorResource:this.editorResource,cardConfig:s,enableMultiplayer:u,fileUploader:{useFileUpload:l,fileTypes:N},initialEditorState:this.args.lexical,multiplayerUsername:p,multiplayerDocId:c,multiplayerEndpoint:d,onError:this.onError,darkMode:this.feature.nightShift,isTKEnabled:!0},r.default.createElement(q,{editorResource:this.editorResource,cursorDidExitAtTop:e?null:this.args.cursorDidExitAtTop,placeholderText:e?null:this.args.placeholderText,darkMode:e?null:this.feature.nightShift,onChange:e?this.args.updateSecondaryInstanceModel:this.args.onChange,registerAPI:e?this.args.registerSecondaryAPI:this.args.registerAPI}),r.default.createElement($,{editorResource:this.editorResource,onChange:e?()=>{}:this.args.updateWordCount}),r.default.createElement(Y,{editorResource:this.editorResource,onChange:e?()=>{}:this.args.updatePostTkCount})))
 return r.default.createElement("div",{className:["koenig-react-editor","koenig-lexical",this.args.className].filter(Boolean).join(" ")},r.default.createElement(H,{config:this.config},r.default.createElement(r.Suspense,{fallback:r.default.createElement("p",{className:"koenig-react-editor-loading"},"Loading editor...")},r.default.createElement(m,null),r.default.createElement(m,{isInitInstance:!0}))))}))}get pinturaJsUrl(){return this.settings.pintura?this.config.pintura?.js||this.settings.pinturaJsUrl:null}get pinturaCSSUrl(){return this.settings.pintura?this.config.pintura?.css||this.settings.pinturaCssUrl:null}get pinturaConfig(){const e=this.getImageEditorJSUrl(),t=this.getImageEditorCSSUrl()
 return e&&t?{jsUrl:e,cssUrl:t}:null}getImageEditorJSUrl(){let e=this.pinturaJsUrl
 return e?(e.startsWith("/")&&(e=window.location.origin+this.ghostPaths.adminRoot.replace(/\/$/,"")+e),e):null}getImageEditorCSSUrl(){let e=this.pinturaCSSUrl
@@ -4757,4 +4757,4 @@ e.default=t.default.create({properties:["name","event","targetUrl","secret"],nam
 e.default=Ember.Component.extend({})})),define("ghost-admin/config/environment",[],(function(){try{var e="ghost-admin/config/environment",t=document.querySelector('meta[name="'+e+'"]').getAttribute("content"),i={default:JSON.parse(decodeURIComponent(t))}
 return Object.defineProperty(i,"__esModule",{value:!0}),i}catch(r){throw new Error('Could not read config from meta tag with name "'+e+'".')}})),runningTests||require("ghost-admin/app").default.create({version:"5.89",name:"ghost-admin"})
 
-//# sourceMappingURL=ghost-efb54d1e241bb6ff99182ed453d727eb.map
+//# sourceMappingURL=ghost-87070f119ed555e77f714304855b0e3c.map

package/core/built/admin/index.html

@@ -58,7 +58,7 @@
 
     <script src="assets/vendor-eb806b4d193377b9b4bbf885840bfdc2.js"></script>
 <script src="assets/chunk.42.90f279da5ca389af68b9.js"></script>
-<script src="assets/chunk.524.88e372a782fa17c3d612.js"></script>
-    <script src="assets/ghost-7998cfd04d4b790bc8f7325d835775cb.js"></script>
+<script src="assets/chunk.524.c121fa5c220befde8234.js"></script>
+    <script src="assets/ghost-532c38e4c3ecd17d68cdcc9fb58b9098.js"></script>
 </body>
 </html>

package/core/frontend/services/routing/controllers/unsubscribe.js

@@ -3,6 +3,8 @@ const url = require('url');
 const members = require('../../../../server/services/members');
 const urlUtils = require('../../../../shared/url-utils');
 const logging = require('@tryghost/logging');
+const settingsHelpers = require('../../../../server/services/settings-helpers');
+const crypto = require('crypto');
 
 module.exports = async function unsubscribeController(req, res) {
     debug('unsubscribeController');
@@ -19,6 +21,17 @@ module.exports = async function unsubscribeController(req, res) {
 
         // Do an actual unsubscribe
         try {
+            if (!query.key) {
+                logging.warn('[List-Unsubscribe] Unsubscribe failed due to missing verification key for ' + query.uuid);
+                return res.status(400).end();
+            }
+            const membersKey = settingsHelpers.getMembersValidationKey();
+            const memberHmac = crypto.createHmac('sha256', membersKey).update(query.uuid).digest('hex');
+            if (memberHmac !== query.key) {
+                logging.warn('[List-Unsubscribe] Unsubscribe failed due to invalid key for ' + query.uuid);
+                return res.status(400).end();
+            }
+
             const member = await members.api.members.get({uuid: query.uuid}, {withRelated: ['newsletters']});
             if (member) {
                 if (query.comments) {
@@ -60,6 +73,9 @@ module.exports = async function unsubscribeController(req, res) {
     if (query.comments) {
         redirectUrl.searchParams.append('comments', query.comments);
     }
+    if (query.key) {
+        redirectUrl.searchParams.append('key', query.key);
+    }
     redirectUrl.searchParams.append('action', 'unsubscribe');
 
     return res.redirect(302, redirectUrl.href);

package/core/server/services/members/middleware.js

@@ -15,10 +15,12 @@ const tpl = require('@tryghost/tpl');
 const onHeaders = require('on-headers');
 const tiersService = require('../tiers/service');
 const config = require('../../../shared/config');
+const settingsHelpers = require('../settings-helpers');
 
 const messages = {
     missingUuid: 'Missing uuid.',
-    invalidUuid: 'Invalid uuid.'
+    invalidUuid: 'Invalid uuid.',
+    invalidKey: 'Invalid key.'
 };
 
 const getFreeTier = async function getFreeTier() {
@@ -97,7 +99,7 @@ const loadMemberSession = async function loadMemberSession(req, res, next) {
 };
 
 /**
- * Require member authentication, and make it possible to authenticate via uuid.
+ * Require member authentication, and make it possible to authenticate via uuid + hashed key.
  * You can chain this after loadMemberSession to make it possible to authenticate via both the uuid and the session.
  */
 const authMemberByUuid = async function authMemberByUuid(req, res, next) {
@@ -114,6 +116,22 @@ const authMemberByUuid = async function authMemberByUuid(req, res, next) {
             });
         }
 
+        const key = req.query.key;
+        if (!key) {
+            throw new errors.UnauthorizedError({
+                message: tpl(messages.invalidKey)
+            });
+        }
+
+        // the request key is a hashed value from the member uuid and the members validation key so we can verify the source
+        //  (only Ghost should be able to generate the key)
+        const memberHmac = crypto.createHmac('sha256', settingsHelpers.getMembersValidationKey()).update(uuid).digest('hex');
+        if (memberHmac !== key) {
+            throw new errors.UnauthorizedError({
+                message: tpl(messages.invalidKey)
+            });
+        }
+
         const member = await membersService.api.memberBREADService.read({uuid});
         if (!member) {
             throw new errors.UnauthorizedError({
@@ -193,25 +211,14 @@ const deleteSuppression = async function deleteSuppression(req, res) {
 
 const getMemberNewsletters = async function getMemberNewsletters(req, res) {
     try {
-        const memberUuid = req.query.uuid;
-
-        if (!memberUuid) {
-            res.writeHead(400);
-            return res.end('Invalid member uuid');
-        }
-
-        const memberData = await membersService.api.members.get({
-            uuid: memberUuid
-        }, {
-            withRelated: ['newsletters']
-        });
+        const memberData = req.member; // validation assumed
 
         if (!memberData) {
             res.writeHead(404);
             return res.end('Email address not found.');
         }
 
-        const data = _.pick(memberData.toJSON(), 'uuid', 'email', 'name', 'newsletters', 'enable_comment_notifications', 'status');
+        const data = _.pick(memberData, 'uuid', 'email', 'name', 'newsletters', 'enable_comment_notifications', 'status');
 
         if (data.newsletters) {
             data.newsletters = formatNewsletterResponse(data.newsletters);
@@ -226,23 +233,15 @@ const getMemberNewsletters = async function getMemberNewsletters(req, res) {
 
 const updateMemberNewsletters = async function updateMemberNewsletters(req, res) {
     try {
-        const memberUuid = req.query.uuid;
-        if (!memberUuid) {
-            res.writeHead(400);
-            return res.end('Invalid member uuid');
-        }
-
-        const data = _.pick(req.body, 'newsletters', 'enable_comment_notifications');
-        const memberData = await membersService.api.members.get({
-            uuid: memberUuid
-        });
+        const memberData = req.member; // validation assumed
         if (!memberData) {
             res.writeHead(404);
             return res.end('Email address not found.');
         }
 
+        const data = _.pick(req.body, 'newsletters', 'enable_comment_notifications');
         const options = {
-            id: memberData.get('id'),
+            id: memberData.id,
             withRelated: ['newsletters']
         };
 

package/core/server/services/settings-helpers/SettingsHelpers.js

@@ -106,6 +106,16 @@ class SettingsHelpers {
         return domain;
     }
 
+    /**
+     * Retrieves the member validation key from the settings cache. The intent is for this key to be used where member 
+     *  auth is not required. For example, unsubscribe links in emails, which are required to be one-click unsubscribe.
+     *
+     * @returns {string} The member validation key.
+     */
+    getMembersValidationKey() {
+        return this.settingsCache.get('members_email_auth_secret');
+    }
+
     getMembersSupportAddress() {
         let supportAddress = this.settingsCache.get('members_support_address');
 

package/core/server/web/members/app.js

@@ -40,9 +40,16 @@ module.exports = function setupMembersApp() {
     // Initializes members specific routes as well as assigns members specific data to the req/res objects
     // We don't want to add global bodyParser middleware as that interferes with stripe webhook requests on - `/webhooks`.
 
-    // Manage newsletter subscription via unsubscribe link
-    membersApp.get('/api/member/newsletters', middleware.getMemberNewsletters);
-    membersApp.put('/api/member/newsletters', bodyParser.json({limit: '50mb'}), middleware.updateMemberNewsletters);
+    // Manage newsletter subscription via unsubscribe link - these should be authenticated by uuid and hashed key
+    membersApp.get('/api/member/newsletters', 
+        middleware.authMemberByUuid,
+        middleware.getMemberNewsletters
+    );
+    membersApp.put('/api/member/newsletters',
+        bodyParser.json({limit: '50mb'}),
+        middleware.authMemberByUuid,
+        middleware.updateMemberNewsletters
+    );
 
     // Get and update member data
     // Caching members content is an experimental feature

package/core/shared/config/defaults.json

@@ -182,7 +182,7 @@
     },
     "portal": {
         "url": "https://cdn.jsdelivr.net/ghost/portal@~{version}/umd/portal.min.js",
-        "version": "2.38"
+        "version": "2.39"
     },
     "sodoSearch": {
         "url": "https://cdn.jsdelivr.net/ghost/sodo-search@~{version}/umd/sodo-search.min.js",

package/core/shared/config/env/config.development.json

@@ -35,4 +35,4 @@
             "maxAge": 0
         }
     }
-}
+}