kantarciandClaude Fable 5.1 7eb462ac7b Redirect the other www spelling to SITE_ORIGIN, hold roles to the role help and fix the audit findings ...

SITE_ORIGIN alone decides whether the site is www or not: CanonicalHostSubscriber
sends the other spelling there with 301, cms:site:origin writes the setting, the
system screen shows it. The roles now match the role help (editor: drafts,
publisher: live content, admin: design, settings, users, system). The installer no
longer reopens on an unreachable database, the session cookie follows ADMIN_PATH,
percent-encoded credentials no longer break the container, consent only accepts
same-site decisions, JSON-LD is HTML-safe, own CSS stays in its block, plus the
editor, updater, download and public-output findings from the full review
(ADR 099, ADR 100).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-15 20:15:20 +02:00

..

packages

Redirect the other www spelling to SITE_ORIGIN, hold roles to the role help and fix the audit findings

2026-09-15 20:15:20 +02:00

bootstrap.php

Fassung 1.7.0: verlässliche Installation, übersichtliche Verwaltung und bedienbare Bewegung

2026-09-14 10:49:54 +02:00

bundles.php

Kant CMS: Grundgerüst, visueller Editor, Mediathek

2026-09-12 10:19:05 +02:00

routes.yaml

Die Verwaltung kann umziehen: /admin ist frei waehlbar

2026-09-13 20:51:55 +02:00

services.yaml

Redirect the other www spelling to SITE_ORIGIN, hold roles to the role help and fix the audit findings

2026-09-15 20:15:20 +02:00