Serve a tenant's assets from a host that resolves, and stop deleting its backgrounds

FixSecurityService
Shipped
August 26, 2026 at 5:09 AM UTC
Author
Kamo
Commit
65c5302

Two faults found while working out why a new org opened with no logo and no colours. THEME DELIVERY. Assets were requested from theme.<the org's own domain>. An org can be created and entered before that domain resolves now — a customer types deltaco.com and is put straight into the workspace — so the browser was asking for a host that does not exist: every logo broken, every colour fallen back to the platform's, with the files sitting correctly provisioned and unreachable. MinIO serves the whole bucket from every theme.<apex> name, so the folder is what names the organization and the host only decides whether the request resolves. themeImageBase takes a serving apex, and the workspace picker passes the one the sign-in is being served from. BACKGROUND DELETION. cleanupExtraBackgrounds read a NULL imageBgCount as zero and removed every slot above it. Zero is a statement — no backgrounds, clear them; NULL is nobody having said. An org that had uploaded three had all three deleted from MinIO, unrecoverably, with nothing to say what happened. An unknown count now deletes nothing.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing