Padreug
cb236703d6
index.html still linked Vite's scaffold favicon at /vite.svg, which does not exist in public/ — so every browser tab (the public demo included) showed a broken icon next to the title. Use the bitSpire logo that is already shipped for the idle screen. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013A6683cCHnQxFUosx1krY4
50 lines
1.7 KiB
HTML
50 lines
1.7 KiB
HTML
<!doctype html>
|
|
<html lang="en" class="dark">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<link rel="icon" type="image/png" href="/logo.png" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" />
|
|
<!--
|
|
Content Security Policy:
|
|
- script-src 'self': only our own bundled scripts, no inline/eval (XSS protection)
|
|
- style-src 'self' 'unsafe-inline': Vue injects styles inline
|
|
- connect-src: WebSocket for Nostr relay, HTTPS for Lightning.Pub and exchange rate APIs
|
|
- img-src 'self' data: blob:: QR codes use data URIs
|
|
- default-src 'self': deny everything not explicitly allowed
|
|
- frame-src 'none': no iframes
|
|
- object-src 'none': no plugins
|
|
-->
|
|
<meta
|
|
http-equiv="Content-Security-Policy"
|
|
content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws: wss: http: https:; img-src 'self' data: blob:; font-src 'self'; frame-src 'none'; object-src 'none'"
|
|
/>
|
|
<title>bitSpire ATM</title>
|
|
<style>
|
|
/* Prevent text selection and context menu on kiosk */
|
|
* {
|
|
user-select: none;
|
|
-webkit-user-select: none;
|
|
touch-action: manipulation;
|
|
-webkit-tap-highlight-color: transparent;
|
|
}
|
|
html,
|
|
body {
|
|
margin: 0;
|
|
padding: 0;
|
|
background: #000;
|
|
}
|
|
/* Kiosk-only: lock overflow and hide cursor */
|
|
@media (min-width: 1024px) {
|
|
html,
|
|
body {
|
|
overflow: hidden;
|
|
cursor: none;
|
|
}
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div id="app"></div>
|
|
<script type="module" src="/src/main.ts"></script>
|
|
</body>
|
|
</html>
|