- Fixed a problem when URL_BASE is empty and would cause the path to be added to the session cookie

src/ControllerTrait.php

@@ -67,6 +67,10 @@ trait ControllerTrait {
     }
 
     protected function redirect(string $url, int $code = 302, array $headers = []) {
+        if ($code === 302 && empty(array_change_key_case($headers, CASE_LOWER)['cache-control'])) {
+            $headers['cache-control'] = 'no-store';
+        }
+
         return new RedirectResponse($url, $code, $headers);
     }
 

src/Routing.php

@@ -97,6 +97,7 @@ class Routing {
                         }
 
                         if ( $forbidden = $this->security->taxus($class, $method, $object->user) ) {
+
                             return $forbidden;
                         }