canglan d7fb971f9f fix: public footer reads DB settings for all visitors ...

- settings.js: new public GET /settings/public returns only
  copyright + icp (no auth, no sensitive settings leaked)
- app.js loadFooter(): dropped Auth.isAdmin() gate, uses public
  endpoint; showPublic() (home/root) now loads footer too
- security.js: apiKeyGuard whitelist /api/settings/public and
  /api/settings/skin-site

2026-08-22 02:51:20 +08:00

12 KiB

Raw Blame History

View Raw