Koko210/immich-folio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

release: v0.16.0

Browse Source 
See CHANGELOG.md for the full v0.16.0 entry.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: ralksta <ralksta@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Ralf <rohlenbo79@gmail.com>
Co-authored-by: Paul Thies <110185070+ImScheinox@users.noreply.github.com>
Co-authored-by: lancetm714 <108419425+lancetm714@users.noreply.github.com>
This commit is contained in:
Ralksta
2026-09-22 14:12:13 +02:00
committed by GitHub
parent c3f92ca4ec
commit a3a6319c29
120 changed files with 6818 additions and 975 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
proxy.ts
View File

@@ -126,18 +126,25 @@ export function proxy(request: NextRequest) {
export const config = {
matcher: [
/*
* Match all request paths except for the ones starting with:
* - api (API routes — JSON/binary responses, no document CSP needed;
* the public ones enforce the site gate themselves)
* - _next/static (static files)
* - _next/image (image optimization files)
* - favicon.ico, sitemap.xml, robots.txt (metadata files)
* Match all request paths except for:
* - /api and everything under it (API routes — JSON/binary responses, no
* document CSP needed; the public ones enforce the site gate themselves)
* - /_next/static/… (static files)
* - /_next/image (image optimization files)
* - /favicon.ico, /sitemap.xml, /robots.txt (metadata files)
*
* Every alternative ends on a boundary, and the dots are escaped. The
* pattern in the Next.js docs does neither, so it also excludes anything
* that merely starts with one of these names — an album slugged
* "apia-samoa" would never reach proxy(), and with it neither the site
* gate nor the CSP. lib/__tests__/proxy.test.ts compiles this pattern the
* way Next does and holds it to a list of paths.
*
* /admin is NOT excluded: it is the highest-privilege surface in the app
* and previously ran with no enforced CSP at all.
*
* Prefetches are no longer excluded here — see the note in proxy().
*/
'/((?!api|_next/static|_next/image|favicon.ico|sitemap.xml|robots.txt).*)',
'/((?!api(?:/|$)|_next/static/|_next/image(?:/|$)|favicon\\.ico$|sitemap\\.xml$|robots\\.txt$).*)',
],
};