fix api security issues and update pages issue

2026-06-04 16:41:19 -04:00
parent feb6be0610
commit 5e5fe3794a
32 changed files with 1628 additions and 37 deletions
@@ -39,13 +39,10 @@ class FileServeService
            'Content-Length' => (string) $meta['size'],
            'ETag' => $meta['etag'],
            'Last-Modified' => $meta['last_modified'],
-            'Cache-Control' => 'public, max-age=86400',
+            'Cache-Control' => 'private, max-age=300',
+            'X-Content-Type-Options' => 'nosniff',
        ];

-        if ($nosniff) {
-            $headers['X-Content-Type-Options'] = 'nosniff';
-        }
-
        return response(file_get_contents($meta['path']), 200, $headers);
    }