BanGUI

Files

Lukas 0a350b3acc Optimize API client headers by method - only set Content-Type and CSRF header as needed

- Only set Content-Type header for requests with a body (POST, PUT, DELETE with body)
- Only set X-BanGUI-Request CSRF header for mutating methods (POST, PUT, DELETE, PATCH)
- GET, HEAD, OPTIONS requests no longer include unnecessary headers, reducing CORS preflights
- Update Web-Development.md to clarify conditional header behavior
- Add comprehensive tests for header behavior by HTTP method

This reduces unnecessary CORS preflight requests on GET endpoints while maintaining
CSRF protection on state-mutating requests.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-04-29 19:52:17 +02:00

Architekture.md

Fix non-atomic setup persistence across DB contexts (Issue #30 )

2026-04-29 19:19:53 +02:00

Backend-Development.md

Fix #34 : Replace setup redirect allowlist prefix matching with explicit allowlist

2026-04-29 19:45:42 +02:00

Features.md

Fix issue #31 : Make schedule reschedule deterministic and observable

2026-04-29 19:24:55 +02:00

Instructions.md

fix(security): Remove insecure session secret fallback in compose.debug.yml