Stability fixes: plugin-scoped contexts for owned pages, absent-href guard, checked locale mounts

2026-08-03 23:51:40 +02:00
parent 2b20497785
commit be3bc2bdbb
28 changed files with 176 additions and 58 deletions
@@ -70,7 +70,7 @@
                <div class="menu-head"><%= t("shell.signedInAs", { name: user.name }) %></div>
                <button class="menu-item" type="button"><svg class="ico"><use href="#i-user" /></svg><%= t("shell.profile") %></button>
                <%# Sign out is a state change → a POST form (not a GET link), CSRF-guarded by app.ts %>
-                <form class="menu-item-form" method="post" action="/logout">
+                <form class="menu-item-form" method="post" action="<%= localeHref("/logout") %>">
                  <input type="hidden" name="_csrf" value="<%= locals.csrfToken || '' %>" />
                  <button class="menu-item danger" type="submit"><svg class="ico"><use href="#i-logout" /></svg><%= t("shell.signOut") %></button>
                </form>