Issue Summary
With one of the last updates there was a change made in the interface of the initial welcome page if the password protection is enabled (if in settings the "Make the site private" is active), Before the change one needed to enter the password and was then able to see the posts and to subscribe. Now subscribing is directly possible even without entering the password. To see the post one need to click "enter access code" on the bottom.
It should be not possible to subsribe without the password as subscribers are getting new posts per newsletter.
Steps to Reproduce
Open domain of password protected ghos instance
Enter mail into "subscribe" field
Receive new posts without ever needing the password
Ghost Version
6.25.1
Node.js Version
How did you install Ghost?
docker on Ubuntu
Database type
MySQL 5.7
Browser & OS version
No response
Relevant log / error output
Code of Conduct
Issue Summary
With one of the last updates there was a change made in the interface of the initial welcome page if the password protection is enabled (if in settings the "Make the site private" is active), Before the change one needed to enter the password and was then able to see the posts and to subscribe. Now subscribing is directly possible even without entering the password. To see the post one need to click "enter access code" on the bottom.
It should be not possible to subsribe without the password as subscribers are getting new posts per newsletter.
Steps to Reproduce
Open domain of password protected ghos instance
Enter mail into "subscribe" field
Receive new posts without ever needing the password
Ghost Version
6.25.1
Node.js Version
How did you install Ghost?
docker on Ubuntu
Database type
MySQL 5.7
Browser & OS version
No response
Relevant log / error output
Code of Conduct