fix: PUT /board/api/pages exempté CSRF + reload après saveTitle

- CSRF middleware: excluded_paths utilise maintenant startswith (pas exact match) - /board/api/pages/* exempté — les PUT depuis page_editor passent - saveTitle() reload la page après sauvegarde → sidebar mis à jour
2026-07-08 15:57:25 -04:00
parent 1d2c2c0919
commit c00442c693
2 changed files with 4 additions and 4 deletions
@@ -155,7 +155,7 @@
        fetch(`/board/api/pages/{{ page.id }}?title=${encodeURIComponent(newTitle)}`, {
          method: 'PUT',
          headers: { 'X-CSRF-Token': token }
-        });
+        }).then(() => { location.reload(); });
      },
      handleSlash(e) {
        if (e.key === '/' && !e.ctrlKey && !e.metaKey) {