loks0n 3a5bb98b70 refactor(cache): generalize content-type guard and gate bypass to privileged callers ...

Addresses review feedback on the prior commit:

- The shared cache middleware should not hardcode `image/*`. Replace the
  inline content-type check with a generic `cache.contentType` route
  label (a prefix match). Each route that opts into caching now declares
  `->label('cache.contentType', 'image/')` alongside `->label('cache', true)`.
- A public `Cache-Control: no-cache` bypass is a DDoS vector on expensive
  pipelines (Imagick transforms, Chromium screenshots). Restrict the
  bypass to privileged callers — API keys, admin console, and other
  server-side contexts — so only trusted traffic can force-miss the cache.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-23 11:29:35 +01:00

..

Appwrite

refactor(cache): generalize content-type guard and gate bypass to privileged callers

2026-04-23 11:29:35 +01:00

Executor

chore: bump PHPStan to level 4 and fix all new errors

2026-04-19 17:31:20 +05:30

Utopia/Bus

remove unrelated changes

2026-04-05 20:06:13 +05:30