Files
Verso/server-ce
claudeandClaude Sonnet 4.6 eb74c4fced
Build and Deploy Verso / deploy (push) Successful in 4m19s
Build and Deploy Verso (prod) / deploy (push) Successful in 1m7s
fix(nginx): route all build output files directly to clsi-nginx
Previously only output.* (output.html, output.pdf, etc.) bypassed the
web server. Companion assets (CSS, JS, images, videos, fonts) from
Quarto/RevealJS presentations went through the web server, hitting the
miscOutputDownload rate limiter (1000 req/hour per project). A heavy
presentation loads 50+ assets per page view and would exhaust the limit
quickly, returning 429 for most assets and leaving the page unstyled.

The build ID is an unguessable random token — the same security model
already used for output.html being served without auth. Routing all
output files through clsi-nginx is safe and also fixes Content-Type
for media files (video/mp4 etc.) now that the mime type fix is in place.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-07-14 11:02:50 +00:00
..
2026-04-28 08:52:37 +00:00