DorianandClaude Opus 4.6
ece4540388
Restricts script, style, img, connect, media, and frame sources to known-safe origins. Blocks object embeds and enforces base-uri self. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
23 lines
1.7 KiB
HTML
23 lines
1.7 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en" class="h-full overflow-hidden">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" />
|
|
<meta name="theme-color" content="#0a0a0a" media="(prefers-color-scheme: dark)" />
|
|
<meta name="theme-color" content="#faf9f6" media="(prefers-color-scheme: light)" />
|
|
<meta name="mobile-web-app-capable" content="yes" />
|
|
<meta name="apple-mobile-web-app-capable" content="yes" />
|
|
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
|
|
<meta name="apple-mobile-web-app-title" content="AIUI" />
|
|
<meta name="description" content="AI chat interface with rich content surfaces" />
|
|
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://image.tmdb.org https://covers.openlibrary.org https://is1-ssl.mzstatic.com https://upload.wikimedia.org https://books.google.com https://*.googleusercontent.com; font-src 'self'; connect-src 'self' https://mempool.space https://itunes.apple.com https://openlibrary.org https://www.googleapis.com https://en.wikipedia.org https://openrouter.ai wss:; media-src 'self' blob: https:; frame-src https://www.youtube-nocookie.com https://*.odysee.com; object-src 'none'; base-uri 'self';" />
|
|
<link rel="icon" href="/favicon.svg" type="image/svg+xml" />
|
|
<link rel="apple-touch-icon" href="/apple-touch-icon-180x180.png" />
|
|
<title>AIUI</title>
|
|
</head>
|
|
<body class="antialiased h-full overflow-hidden fixed w-full">
|
|
<div id="app"></div>
|
|
<script type="module" src="/src/main.ts"></script>
|
|
</body>
|
|
</html>
|