activity feed: restrict csrf_token usage unless logged in to prevent cookie setting, remove the unused rack-cache

This commit is contained in:
Kyle Drake 2025-04-24 17:54:37 -05:00
parent 9479ca05d0
commit e21e20b32e
9 changed files with 34 additions and 45 deletions

View file

@ -1,6 +1,4 @@
get '/activity' do
#expires 7200, :public, :must_revalidate if self.class.production? # 2 hours
@page = params[:page] || 1
if params[:tag]

View file

@ -75,7 +75,6 @@ end
get '/admin/stats' do
require_admin
# expires 14400, :public, :must_revalidate if self.class.production? # 4 hours
@stats = {
total_hosted_site_hits: DB['SELECT SUM(hits) FROM sites'].first[:sum],