getCsrfToken();
// Only a single valid CSS class is allowed; malformed values fall back safely.
$editableClass = $config['editableClass'] ?? 'editable';
if (!is_string($editableClass) || !preg_match('/^[a-zA-Z_][a-zA-Z0-9_-]*$/', $editableClass)) {
$editableClass = 'editable';
}
// Keep the administration shell private by redirecting anonymous requests to login.
if (!$authentication->isLoggedIn()) {
header("Location: /cms/login/");
exit;
}
SecurityHeaders::html(true, isset($config['security']['cookieSecure']) ? (bool) $config['security']['cookieSecure'] : null);
?>
NeoCMS