$safe_actions = array('login', 'bookmark-feed', 'select-db', 'logout', 'notfound');
if (!Model\User\is_loggedin() && !in_array($action, $safe_actions)) {
if (!Model\RememberMe\authenticate()) {
Model\User\logout();
Response\redirect('?action=login');
}
} elseif (Model\RememberMe\has_cookie()) {
Model\RememberMe\refresh();
}
// Load translations
$language = Model\Config\get('language') ?: 'en_US';
Translator\load($language);
// Set timezone
date_default_timezone_set(Model\Config\get('timezone') ?: 'UTC');
// HTTP secure headers
Response\csp(array('media-src' => '*', 'img-src' => '*', 'frame-src' => Model\Config\get_iframe_whitelist(), 'referrer' => 'no-referrer'));
Response\xframe();
Response\xss();
Response\nosniff();
if (ENABLE_HSTS && Helper\is_secure_connection()) {
Response\hsts();
}
});
// Show help
Router\get_action('show-help', function () {
Response\html(Template\load('show_help'));
});
// Show the menu for the mobile view
Router\get_action('more', function () {
Response\html(Template\layout('show_more', array('menu' => 'more')));
});
$safe_actions = array('login', 'bookmark-feed', 'select-db', 'logout', 'notfound');
if (!Model\User\is_loggedin() && !in_array($action, $safe_actions)) {
if (!Model\RememberMe\authenticate()) {
Model\User\logout();
Response\redirect('?action=login');
}
} elseif (Model\RememberMe\has_cookie()) {
Model\RememberMe\refresh();
}
// Load translations
$language = Model\Config\get('language') ?: 'en_US';
Translator\load($language);
// Set timezone
date_default_timezone_set(Model\Config\get('timezone') ?: 'UTC');
// HTTP secure headers
Response\csp(array('media-src' => '*', 'img-src' => '*', 'frame-src' => Model\Config\get_iframe_whitelist()));
Response\xframe();
Response\xss();
Response\nosniff();
});
// Show help
Router\get_action('show-help', function () {
Response\html(Template\load('show_help'));
});
// Show the menu for the mobile view
Router\get_action('more', function () {
Response\html(Template\layout('show_more', array('menu' => 'more')));
});
// Image proxy (avoid SSL mixed content warnings)
Router\get_action('proxy', function () {
Model\Proxy\download(rawurldecode(Request\param('url')));
