rays 9648a79f3f Keep media out of shared caches (#189) ...

Played from ipodderx.sdf1.net, DeadAir's audio reached ipx as one request
with no Range header: Cloudflare caches by extension, deadair.mp3 has one,
and /media said nothing about caching, so Cloudflare fetched the whole file
and served ranges from its own copy, to anyone Access let in, without the
subscriber check (#129). /media/{id} has no extension and was never cached.
Cache-Control: private on every media response, the save included.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-11 13:23:27 +00:00

..

data

Verify Cloudflare Access's signed token before trusting the proxy

2026-09-19 14:38:25 +00:00

load

Give SQLite several connections, so requests are answered at once (#136)

2026-10-05 19:55:22 +00:00

ui

Keep media out of shared caches (#189)

2026-10-11 13:23:27 +00:00

contrast.js

Toggle state in the icon's shape, not the theme's colours (#74)

2026-09-28 23:38:59 +00:00

dom-stub.js

Paint the bar around the Dynamic Island in the theme's background (#147)

2026-10-08 13:51:19 +00:00

native-bridge.js

Hand playback to a native shell (#45)

2026-09-19 18:49:53 -04:00

page-smoke.js

Lay the Directory out as Apple's is, with the most subscribed in it (#124, #126, #128)

2026-10-05 16:19:38 +00:00