kepr / 8265eef6a99f

fix: serve all server-rendered pages with explicit text/html (v1.56.246) writePublicHtml is the single choke point for every server-rendered page, but httpz's default content_type is null (no Content-Type header) and the front proxy sets X-Content-Type-Options: nosniff — so any page whose handler forgot to set .HTML rendered as raw source text in browsers. Seen live on /admin (operator session showed the whole document as text); /docs and /support were missing the type too. Set res.content_type = .HTML once in writePublicHtml instead of relying on every caller to remember. deploy-verify now asserts content-type: text/html on /docs and /support. Also drops one stray blank line zig fmt flagged in server.zig. Gates: zig fmt, zig build test, musl ReleaseSafe cross-build all green.

dev · 2 weeks ago · 2026-08-06 · 15.2 MB

parent: 529bbd6aedd3