clusev/resources
boban 4ca2ed96d5 feat(brand): source-view comment + console branding with self-XSS warning (v0.9.56)
- A friendly HTML comment in the page source (both layouts, before <head>) —
  ASCII "CLUSEV", what it is, and the project link — for anyone who View-Sources.
- A styled console banner printed on load (every page, incl. login): the CLUSEV
  wordmark, a one-liner, the repo link, AND a self-XSS security warning. The
  warning earns its place: a Linux-server control panel is a prime target for
  "paste this into your console" social engineering, so the notice sits exactly
  where that attack happens. console styling is best-effort and never throws.

Verified: /login 200, the console logs the brand + warning + link, the source
carries the comment, no page errors; 374 tests pass; Vite build clean.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-22 06:19:46 +02:00
..
css fix(files): responsive file rows + restore button cursor (v0.9.55) 2026-06-22 06:06:32 +02:00
fonts fix(ux): editor click bug (@js→index), self-hosted fonts, split-brand auth, R14 2026-06-13 01:16:31 +02:00
js feat(brand): source-view comment + console branding with self-XSS warning (v0.9.56) 2026-06-22 06:19:46 +02:00
views feat(brand): source-view comment + console branding with self-XSS warning (v0.9.56) 2026-06-22 06:19:46 +02:00