bookstack

Commit Graph

Author	SHA1	Message	Date
Dan Brown	b90033a730	Guest control: Cleaned methods involved in fetching/handling - Moves guest user caching from User class to app container for simplicity. - Updates test to use simpler $this->users->guest() method for consistency. - Streamlined helpers to avoid function overlap for simplicity. - Extracted user profile dropdown while doing changes.	2023-09-16 13:18:35 +01:00
Dan Brown	a9b3df537f	Applied changes from styleci	2021-10-08 22:23:17 +01:00
Dan Brown	41ac69adb1	Forced response cache revalidation on logged-in responses - Prevents authenticated responses being visible when back button pressed in browser. - Previously, 'no-cache, private' was added by default by Symfony which would have prevents proxy cache issues but this adds no-store and a max-age option to also invalidate all caching. Thanks to @haxatron via huntr.dev Ref: https://huntr.dev/bounties/6cda9df9-4987-4e1c-b48f-855b6901ef53/	2021-10-08 15:22:09 +01:00

Author

SHA1

Message

Date

Dan Brown

b90033a730

Guest control: Cleaned methods involved in fetching/handling

- Moves guest user caching from User class to app container for
  simplicity.
- Updates test to use simpler $this->users->guest() method for
  consistency.
- Streamlined helpers to avoid function overlap for simplicity.
- Extracted user profile dropdown while doing changes.

2023-09-16 13:18:35 +01:00

Dan Brown

a9b3df537f

Applied changes from styleci

2021-10-08 22:23:17 +01:00

Dan Brown

41ac69adb1

Forced response cache revalidation on logged-in responses

- Prevents authenticated responses being visible when back button
  pressed in browser.
- Previously, 'no-cache, private' was added by default by Symfony which
  would have prevents proxy cache issues but this adds no-store and a
  max-age option to also invalidate all caching.

Thanks to @haxatron via huntr.dev
Ref: https://huntr.dev/bounties/6cda9df9-4987-4e1c-b48f-855b6901ef53/

2021-10-08 15:22:09 +01:00

3 Commits