class StylesheetsController < ApplicationController skip_before_filter :preload_json, :redirect_to_login_if_required, :check_xhr, :verify_authenticity_token, only: [:show] def show target,digest = params[:name].split("_") digest_orig = digest digest = "_" + digest if digest cache_time = request.env["HTTP_IF_MODIFIED_SINCE"] cache_time = Time.rfc2822(cache_time) rescue nil if cache_time query = StylesheetCache.where(target: target) if digest query = query.where(digest: digest_orig) else query = query.order('id desc') end stylesheet_time = query.pluck(:created_at).first if !stylesheet_time return render nothing: true, status: 404 end if cache_time && stylesheet_time && stylesheet_time <= cache_time return render nothing: true, status: 304 end # Security note, safe due to route constraint location = "#{Rails.root}/#{DiscourseStylesheets::CACHE_PATH}/#{target}#{digest}.css" unless File.exist?(location) if current = query.first File.write(location, current.content) else return render nothing: true, status: 404 end end response.headers['Last-Modified'] = stylesheet_time.httpdate expires_in 1.year, public: true unless Rails.env == "development" send_file(location, disposition: :inline) end end