[add] previous page URL update handling (disabled by default)

Author: i4004

src/Simplify.Web.Tests/Controllers/Execution/PreviousPageUrlUpdaterTests.cs

@@ -1,9 +1,11 @@
 using System.Collections.Generic;
 using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
 using Moq;
 using NUnit.Framework;
 using Simplify.Web.Controllers;
 using Simplify.Web.Controllers.Execution;
+using Simplify.Web.Modules.Context;
 using Simplify.Web.Modules.Redirection;
 
 namespace Simplify.Web.Tests.Controllers.Execution;
@@ -17,13 +19,18 @@ public class PreviousPageUrlUpdaterTests
 
 	private Mock<IControllersExecutor> _baseExecutor = null!;
 	private Mock<IRedirector> _redirector = null!;
+	private Mock<IWebContext> _webContext = null!;
 
 	[SetUp]
 	public void Initialize()
 	{
 		_baseExecutor = new Mock<IControllersExecutor>();
 		_redirector = new Mock<IRedirector>();
-		_updater = new PreviousPageUrlUpdater(_baseExecutor.Object, _redirector.Object);
+		_webContext = new Mock<IWebContext>();
+
+		_webContext.SetupGet(x => x.Response).Returns(new Mock<HttpResponse>().Object);
+
+		_updater = new PreviousPageUrlUpdater(_baseExecutor.Object, _redirector.Object, _webContext.Object);
 	}
 
 	[Test]

src/Simplify.Web/Bootstrapper/Setup/BaseBootstrapperControllersExecution.cs

@@ -6,6 +6,7 @@
 using Simplify.Web.Controllers.Response;
 using Simplify.Web.Controllers.V1.Execution;
 using Simplify.Web.Controllers.V2.Execution;
+using Simplify.Web.Modules.Context;
 using Simplify.Web.Modules.Redirection;
 
 namespace Simplify.Web.Bootstrapper.Setup;
@@ -62,9 +63,13 @@ public virtual void RegisterControllersExecutor()
 
 		BootstrapperFactory.ContainerProvider.Register<ControllersExecutor>();
 
-		BootstrapperFactory.ContainerProvider.Register<IControllersExecutor>(r =>
-			new PreviousPageUrlUpdater(
+		if (!Settings.DisablePreviousPageUrlUpdate)
+			BootstrapperFactory.ContainerProvider.Register<IControllersExecutor>(r =>
+				new PreviousPageUrlUpdater(
 					r.Resolve<ControllersExecutor>(),
-				r.Resolve<IRedirector>()));
+					r.Resolve<IRedirector>(),
+					r.Resolve<IWebContext>()));
+		else
+			BootstrapperFactory.ContainerProvider.Register<IControllersExecutor>(r => r.Resolve<ControllersExecutor>());
 	}
 }

src/Simplify.Web/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [5.6.0] - 2026-07-24
+
+### Added
+
+- `DisablePreviousPageUrlUpdate` setting (default: `true`) to control automatic
+  previous-page URL cookie tracking. The feature is now disabled by default — the
+  `PreviousPageUrlUpdater` decorator is not registered, eliminating both the cookie
+  write and its entry in the controller-execution call stack.
+  Set to `false` in `SimplifyWebSettings` to re-enable the previous-page tracking.
+  Configure via `SimplifyWebSettings:DisablePreviousPageUrlUpdate` in appsettings.json.
+
+### Fixed
+
+- `StatusCode.ExecuteAsync()`: check `Response.HasStarted` before setting the status
+  code and content type, preventing an `InvalidOperationException` when the response
+  has already started (e.g. because an earlier middleware wrote to it).
+- `PreviousPageUrlUpdater`: skip cookie setting when `Response.HasStarted` is true,
+  preventing a crash when the response stream is already being written.
+
 ## [5.5.0] - 2026-07-06
 
 ### Added

src/Simplify.Web/Controllers/Execution/PreviousPageUrlUpdater.cs

@@ -1,5 +1,6 @@
 using System.Collections.Generic;
 using System.Threading.Tasks;
+using Simplify.Web.Modules.Context;
 using Simplify.Web.Modules.Redirection;
 
 namespace Simplify.Web.Controllers.Execution;
@@ -8,7 +9,7 @@ namespace Simplify.Web.Controllers.Execution;
 /// Provides the previous page URL updater
 /// </summary>
 /// <seealso cref="IControllersExecutor" />
-public class PreviousPageUrlUpdater(IControllersExecutor baseExecutor, IRedirector redirector) : IControllersExecutor
+public class PreviousPageUrlUpdater(IControllersExecutor baseExecutor, IRedirector redirector, IWebContext webContext) : IControllersExecutor
 {
 	/// <summary>
 	/// Executes the controllers asynchronously.
@@ -18,7 +19,7 @@ public async Task<ResponseBehavior> ExecuteAsync(IReadOnlyList<IMatchedControlle
 	{
 		var result = await baseExecutor.ExecuteAsync(controllers);
 
-		if (result == ResponseBehavior.Default)
+		if (result == ResponseBehavior.Default && !webContext.Response.HasStarted)
 			redirector.SetPreviousPageUrlToCurrentPage();
 
 		return result;

src/Simplify.Web/Responses/StatusCode.cs

@@ -37,9 +37,10 @@ public class StatusCode(int statusCode, string? responseData = null, string? con
 	/// </summary>
 	public override async Task<ResponseBehavior> ExecuteAsync()
 	{
-		Context.Response.StatusCode = Code;
+		if (!Context.Response.HasStarted)
+			Context.Response.StatusCode = Code;
 
-		if (ContentType != null)
+		if (ContentType != null && !Context.Response.HasStarted)
 			Context.Response.ContentType = ContentType;
 
 		if (ResponseData != null)

src/Simplify.Web/Settings/ISimplifyWebSettings.cs

@@ -188,4 +188,14 @@ public interface ISimplifyWebSettings
 	/// Requests with a Content-Length exceeding this value will be rejected.
 	/// </summary>
 	long MaxRequestBodySize { get; }
+
+	/// <summary>
+	/// Gets the value indicating whether the automatic previous page URL update
+	/// (via cookie) after each request should be disabled.
+	/// When enabled, Simplify.Web automatically stores the current page URL as the
+	/// "previous page" URL after each successful request.
+	/// Disable this if you do not need this functionality or if it conflicts with
+	/// responses that start writing before the URL can be stored (e.g. <c>StatusCode</c> responses).
+	/// </summary>
+	bool DisablePreviousPageUrlUpdate { get; }
 }

src/Simplify.Web/Settings/SimplifyWebSettings.cs

@@ -216,6 +216,11 @@ public SimplifyWebSettings(IConfiguration configuration)
 	/// </summary>
 	public long MaxRequestBodySize { get; private set; } = 104857600;
 
+	/// <summary>
+	/// Gets the value indicating whether the automatic previous page URL update (via cookie) after each request should be disabled.
+	/// </summary>
+	public bool DisablePreviousPageUrlUpdate { get; private set; } = true;
+
 	private void LoadLanguageManagerSettings(IConfiguration config)
 	{
 		DefaultLanguage = config.GetValueOrDefaultValue(nameof(DefaultLanguage), DefaultLanguage);
@@ -273,6 +278,7 @@ private void LoadEngineBehaviorSettings(IConfiguration config)
 		HideExceptionDetails = config.GetValue<bool?>(nameof(HideExceptionDetails)) ?? HideExceptionDetails;
 		ErrorPageDarkStyle = config.GetValue<bool>(nameof(ErrorPageDarkStyle));
 		MaxRequestBodySize = config.GetValue<long?>(nameof(MaxRequestBodySize)) ?? MaxRequestBodySize;
+		DisablePreviousPageUrlUpdate = config.GetValue<bool?>(nameof(DisablePreviousPageUrlUpdate)) ?? DisablePreviousPageUrlUpdate;
 	}
 
 	private void LoadCacheSettings(IConfiguration config)

src/Simplify.Web/Simplify.Web.csproj

@@ -9,7 +9,7 @@
 		<SymbolPackageFormat>snupkg</SymbolPackageFormat>
 		<GenerateDocumentationFile>true</GenerateDocumentationFile>
 
-		<Version>5.5</Version>
+		<Version>5.6</Version>
 
 		<Description>Lightweight and fast .NET web-framework based on MVC and OWIN</Description>
 		<Product>Simplify</Product>