fix: iframe for PDF display, exclude cover files from public loop, no session on media requests

This commit is contained in:
Pontoporeia
2026-04-27 21:11:58 +02:00
parent 46a3c360ec
commit e09b056115
3 changed files with 18 additions and 6 deletions

View File

@@ -48,9 +48,6 @@ class Dispatcher {
* execute the action, and render the view.
*/
public function dispatch(): void {
// Ensure session + CSRF token are initialised for all public requests
require_once APP_ROOT . '/src/App.php';
App::boot();
// 1. Direct-response endpoints (render their own output)
$direct = $this->matchDirect();
if ($direct) {
@@ -58,6 +55,10 @@ class Dispatcher {
return;
}
// Ensure session + CSRF token are initialised for routed pages
require_once APP_ROOT . '/src/App.php';
App::boot();
// 2. Routed pages (controller + view)
$route = $this->matchRoute();
if (!$route) {