fs 3053a77cde fix(security): prevent browser caching of dynamic pages ...

Add Cache-Control: no-store to all PHP-rendered pages so the browser
never serves a stale admin/auth page from its back-forward cache.
Static assets (CSS, JS, images) keep their 30-day expiry unchanged.

Uses fastcgi_hide_header to suppress PHP's default Cache-Control
before setting the definitive header via Nginx.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-13 19:37:13 +01:00

..

certs

add composer-unused, comprehensive docs, and project restructure

2026-02-22 15:27:35 +01:00

default.conf

fix(security): prevent browser caching of dynamic pages

2026-03-13 19:37:13 +01:00

prod.conf

fix(security): prevent browser caching of dynamic pages

2026-03-13 19:37:13 +01:00