mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-10 05:53:05 +09:00
Juan Denis
81aa19dafd
Move the theme FOUC snippet to /theme-init.js, allow the build-injected vendor importmap by sha256, keep blob: for runtime extensions. Document the localStorage token limitation in SECURITY.md.
24 lines
973 B
HTML
24 lines
973 B
HTML
<!doctype html>
|
|
<html lang="en">
|
|
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<!-- Single SVG favicon so the per-install tint (install.sh randomize_favicon)
|
|
is the only mark served; no fixed raster icon to fingerprint-cluster on. -->
|
|
<link rel="icon" type="image/svg+xml" href="/favicon.svg" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
|
|
<meta name="description" content="Control Panel" />
|
|
<title>Control Panel</title>
|
|
<!-- Fonts are SELF-HOSTED (see src/styles/base/_fonts.scss → /fonts/*.woff2).
|
|
No Google Fonts / third-party CDN: a self-hosted control panel must not
|
|
leak every user's IP + usage to Google. Falls back to system-ui until
|
|
the woff2 files are present (run frontend/scripts/fetch-fonts.mjs). -->
|
|
<script src="/theme-init.js"></script>
|
|
</head>
|
|
|
|
<body>
|
|
<div id="root"></div>
|
|
<script type="module" src="/src/main.jsx"></script>
|
|
</body>
|
|
|
|
</html> |