From Dev.to
Ghost staff authentication is part of the public-site attack surface
Ghost staff authentication is part of the public-site attack surface A Ghost site can serve public pages while exposing a staff administration route for content, members, integrations, and site sett...