bookstack

Commit Graph

Author	SHA1	Message	Date
Dan Brown	593645acfe	Themes: Added route to serve public theme files Allows files to be placed within a "public" folder within a theme directory which the contents of will served by BookStack for access. - Only "web safe" content-types are provided. - A static 1 day cache time it set on served files. For #3904	2025-01-13 14:34:44 +00:00
Dan Brown	7c4dc981cd	Middlware: Prevented caching of all app requests Previously we'd prevent caching of authed responses for security (prevent back cache or proxy caching) but caching could still be an issue in non-auth scenarios due to CSRF (eg. returning to login screen after session expiry). For #4600	2023-10-23 13:32:15 +01:00

Author

SHA1

Message

Date

Dan Brown

593645acfe

Themes: Added route to serve public theme files

Allows files to be placed within a "public" folder within a theme
directory which the contents of will served by BookStack for access.

- Only "web safe" content-types are provided.
- A static 1 day cache time it set on served files.

For #3904

2025-01-13 14:34:44 +00:00

Dan Brown

7c4dc981cd

Middlware: Prevented caching of all app requests

Previously we'd prevent caching of authed responses for security
(prevent back cache or proxy caching) but caching could still be an
issue in non-auth scenarios due to CSRF (eg. returning to login screen after
session expiry).

For #4600

2023-10-23 13:32:15 +01:00

2 Commits