Ghost staff authentication is part of the public-site attack surface A Ghost site can serve public pages while exposing a staff administration route for content, members, integrations, and site settings. The public website and the staff login share infrastructure, but they do not have the same r...
Source: [Dev.to](https://dev.to/facilishz/ghost-staff-authentication-is-part-of-the-public-site-attack-surface-d6l)