Jakub Zych e32940d90f fix(19.3-06): credentialed CORS refuses wildcard-host and unanchored origins (WR-04) ...

- with supports_credentials, a * origin must be the whole leftmost host
  label, patterns must be anchored with ^ and $, and no origin rule may
  match the probe origins outside any configured domain
- globally and per profile; non-credentialed configs load as before

2026-10-15 22:25:43 +02:00

..

architecture

fix(19.3-06): cors:<profile> headers on every response of the route (CR-01)

2026-10-15 22:24:08 +02:00

backend

feat(19.3-04): pact.ReorderAfterSave hook inside cabana's reorder transaction

2026-10-15 18:31:49 +02:00

console

feat(19.3-03): summer.yaml build.tags and the summercms_s3 tag that links the S3 uploads driver

2026-10-15 18:07:05 +02:00

database

feat(19.3-03): storage.uploads.public_url for direct bucket or CDN file URLs

2026-10-15 18:13:00 +02:00

examples/blog

fix(16.3): refresh CSRF coverage golden and blog scaffold layout

2026-10-11 13:53:31 +02:00

plugins

fix(17): CR-01 ignore an item URL pattern override that is not a path

2026-10-12 21:25:30 +02:00

services

fix(19.3-06): credentialed CORS refuses wildcard-host and unanchored origins (WR-04)

2026-10-15 22:25:43 +02:00

setup

feat(19.3-04): cooler site-cache purge service with site_cache.purge_url and purge_token

2026-10-15 18:21:10 +02:00

index.md

docs(architecture): add performance and scaling page compared to PHP-FPM

2026-10-01 19:20:46 +02:00

site.yaml

docs(14.3-03): document summer new and the one-command start

2026-10-08 12:08:35 +02:00