QT/InvoiceShelf
1
0
Fork 0
mirror of https://github.com/InvoiceShelf/InvoiceShelf.git synced 2026-09-01 21:00:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add secure module marketplace runtime (#745)

Browse Source
This commit is contained in:
Darko Gjorgjijoski
2026-08-05 03:49:42 +02:00
committed by GitHub
parent f322c2b74d
commit 8579e4f85f
79 changed files with 2084 additions and 1762 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Controllers/Modules/ScriptController.php
+15 -3
View File
@@ -3,6 +3,7 @@
namespace App\Http\Controllers\Modules;
use App\Http\Controllers\Controller;
use App\Support\Module\ModuleAssetVersion;
use DateTime;
use Illuminate\Http\Request;
use Illuminate\Http\Response;
@@ -23,14 +24,25 @@ class ScriptController extends Controller
{
$path = ModuleRegistry::scriptFor($script);
abort_if($path === null, 404);
abort_if($path === null || ! is_file($path), 404);
return response(
file_get_contents($path),
$contents = file_get_contents($path);
abort_if(! is_string($contents), 404);
$version = ModuleAssetVersion::forContents($contents);
$cacheControl = is_string($request->query('v')) && hash_equals($version, $request->query('v'))
? 'public, max-age=31536000, immutable'
: 'no-store';
$response = response(
$contents,
200,
[
'Content-Type' => 'application/javascript',
]
)->setLastModified(DateTime::createFromFormat('U', (string) filemtime($path)));
$response->headers->set('Cache-Control', $cacheControl);
return $response;
}
}
app/Http/Controllers/Modules/StyleController.php
+15 -3
View File
@@ -3,6 +3,7 @@
namespace App\Http\Controllers\Modules;
use App\Http\Controllers\Controller;
use App\Support\Module\ModuleAssetVersion;
use DateTime;
use Illuminate\Http\Request;
use Illuminate\Http\Response;
@@ -23,14 +24,25 @@ class StyleController extends Controller
{
$path = ModuleRegistry::styleFor($style);
abort_if($path === null, 404);
abort_if($path === null || ! is_file($path), 404);
return response(
file_get_contents($path),
$contents = file_get_contents($path);
abort_if(! is_string($contents), 404);
$version = ModuleAssetVersion::forContents($contents);
$cacheControl = is_string($request->query('v')) && hash_equals($version, $request->query('v'))
? 'public, max-age=31536000, immutable'
: 'no-store';
$response = response(
$contents,
200,
[
'Content-Type' => 'text/css',
]
)->setLastModified(DateTime::createFromFormat('U', (string) filemtime($path)));
$response->headers->set('Cache-Control', $cacheControl);
return $response;
}
}