melosh/mal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: restrict public access to only login and static assets

Browse Source
This commit is contained in:
mkelvers
2026-04-20 16:45:58 +02:00
parent a49fba220f
commit e6f8f6cdc0
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
internal/middleware/access.go
View File

@@ -15,11 +15,7 @@ type AccessPolicy struct {
func NewAccessPolicy() AccessPolicy { func NewAccessPolicy() AccessPolicy {
return AccessPolicy{ return AccessPolicy{
PublicPaths: map[string]struct{}{ PublicPaths: map[string]struct{}{
"/": {},
"/login": {}, "/login": {},
"/search": {},
"/api/search": {},
"/api/search-quick": {},
}, },
PublicHeads: []string{ PublicHeads: []string{
"/static/", "/static/",