Merged
Conversation
If the FHIR servers answers with a redirect to the OIDC provider due to an invalidated session Task resources to be created and QuestionnaireResponse resource to be updated are stored in the browsers session storage. After the redirect returns from the OIDC provider input elements are pre-filled from the stored resources and the send button scrolled into view. The send button blinks twice to get the users attention.
* Improved Content-Security-Policy Header config for Binary resources. * New Content-Type header value sanitizer filter to remove internal parameters (pretty, summary, inline, etag) before returning the value to the user. * New inline display mode for binary resource content. HTML and Text content is displayed via iframe and open full-screen. Other media types are not displayed inline but can be displayed full-screen. Query parameter _format=inline returns binary content (if accepted by the client) without sending a "Content-Disposition: attachment ..." header.
- FHIR R4 specification enforces week ETags with the value being equal to the resource version number. ETag value for standard FHIR requests can not contain any other characters. ETags follow the specification again, except for frontend HTML responses. - Fixed no ETag send if resource has not lastUpdated value. HTTP header values for "Last-Modified" and "ETag" not set independently. - Added HTTP header "Vary" with value "Accept" to improve potential caching behavior for FHIR json/xml responses that use the same ETag value.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
schwzr
approved these changes
Apr 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
closes #453