discourse/app/controllers/stylesheets_controller.rb

class StylesheetsController < ApplicationController
  skip_before_filter :preload_json, :redirect_to_login_if_required, :check_xhr, :verify_authenticity_token, only: [:show]

  def show

    target,digest = params[:name].split("_")
    digest_orig = digest
    digest = "_" + digest if digest

    cache_time = request.env["HTTP_IF_MODIFIED_SINCE"]
    cache_time = Time.rfc2822(cache_time) rescue nil if cache_time

    query = StylesheetCache.where(target: target)
    if digest
      query = query.where(digest: digest_orig)
    else
      query = query.order('id desc')
    end

    stylesheet_time = query.pluck(:created_at).first
    if !stylesheet_time
      return render nothing: true, status: 404
    end

    if cache_time && stylesheet_time && stylesheet_time <= cache_time
      return render nothing: true, status: 304
    end

    # Security note, safe due to route constraint
    location = "#{Rails.root}/#{DiscourseStylesheets::CACHE_PATH}/#{target}#{digest}.css"

    unless File.exist?(location)
      if current = query.first
        File.write(location, current.content)
      else
        return render nothing: true, status: 404
      end
    end

    response.headers['Last-Modified'] = stylesheet_time.httpdate
    expires_in 1.year, public: true unless Rails.env == "development"
    send_file(location, disposition: :inline)

  end
end