ignacionelson 37c9cb839f Never remember a JSON request as the page to go back to ...

Saving a settings form could open Inertia's error dialog showing
{"count":0}. back() prefers the Referer and falls back to the URL the
session recorded last. Laravel records every GET not marked as Ajax, and
the notification bell's plain fetch() of its unread count is not marked,
so the poll became "the previous page". Where the Referer did not arrive,
because a proxy or a browser stripped it, the save redirected to
/notifications/unread-count, and Inertia rendered the JSON as an error.

The session middleware is swapped for a subclass that skips recording
when the request asked for JSON. The rule is about the request, not about
that one route: nothing that asked for JSON is a page anybody goes back
to. Inertia visits ask for HTML and are recorded as before, and the
middleware order is unchanged (the sorter matches the subclass by its
parent).

A test reproduces it: open the privacy form, poll the count the way the
bell does, and save with no Referer. It failed with a redirect to
/notifications/unread-count before this change.

Reported by @0xVavaldi (#1799)

2026-09-25 02:40:29 -03:00

..

Controllers

Stop serving a self-deleted account's files, and let them go at once

2026-09-24 16:58:48 -03:00

Middleware

Never remember a JSON request as the page to go back to

2026-09-25 02:40:29 -03:00

Requests

Let each role, and each person, choose where they land after signing in

2026-09-13 15:05:40 -03:00