v1.4.539
danielmiessler/Fabricv1.4.539Oct 22, 2026by github-actions[bot]
Upgrading?
Release notes summary
Adds middleware that sets X-Content-Type-Options: nosniff and Cache-Control: no-store on every API response, including error responses. It preserves handler-specific Cache-Control overrides and applies no-store by default to all routes including Swagger UI.
Key Highlights
- Added nosniff and no-store headers to all API responses
- Covers 401, 403, and 413 responses
- Preserves handler-specific Cache-Control overrides
- Default no-store caching policy applied to all routes including Swagger UI
- Removed obsolete Swagger caching assertions and unused imports
New Features
- Security headers middleware for all API responses
- Default no-store caching policy
- Preserved per-handler cache overrides
Full Release Notes
## Changes ### PR [#2283](https://github.com/danielmiessler/Fabric/pull/2283) by [pcbeingused333](https://github.com/pcbeingused333) and [ksylvan](https://github.com/ksylvan): fix(server): set nosniff and no-store on every API response - Added a middleware, installed first in `newSecuredEngine`, that sets `X-Content-Type-Options: nosniff` and `Cache-Control: no-store` on every API response, including 401, 403, and 413 replies from later checks. - Preserved handler-specific `Cache-Control` overrides, so responses such as the chat stream keep their own caching behavior. - Applied the default no-store caching policy to all routes, including the Swagger UI pages. - Removed obsolete Swagger caching assertions and unused imports.
Related Repositories
Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
The world’s fastest framework for building websites.
:cherry_blossom: A command-line fuzzy finder