This commit is contained in:
cay 2026-04-09 18:34:39 +01:00
parent df6acd57a8
commit 4a0b955bb4
2 changed files with 11 additions and 15 deletions

11
app.js
View File

@ -61,8 +61,9 @@ app.use(
scriptSrcAttr: ["'unsafe-inline'"],
styleSrc: ["'self'", "'unsafe-inline'", "https://fonts.googleapis.com"],
fontSrc: ["'self'", "https://fonts.gstatic.com"],
imgSrc: ["'self'", "data:"],
imgSrc: ["'self'", "data:", "blob:"],
connectSrc: ["'self'", "ws:", "wss:"],
frameAncestors: ["'self'"], // Erlaubt iframe von eigener Domain
},
},
}),
@ -104,13 +105,7 @@ app.set("views", path.join(__dirname, "views"));
app.use(express.json());
app.use(express.urlencoded({ extended: true }));
app.use(express.static(path.join(__dirname, "public"), {
etag: false,
lastModified: false,
setHeaders: (res) => {
res.setHeader("Cache-Control", "no-store");
}
}));
app.use(express.static(path.join(__dirname, "public")));
/* ========================
Login Middleware

View File

@ -197,7 +197,7 @@
const s = document.createElement("div");
s.className = "card-slot";
if (id === "row1" && i === 1) {
s.innerHTML = `<img src="/images/playcards/Silberklinge.png" style="width:100%;height:100%;object-fit:cover;border-radius:7px;">`;
s.innerHTML = `<img src="/images/cards/Silberklinge.png" style="width:100%;height:100%;object-fit:cover;border-radius:7px;">`;
} else {
s.innerHTML = '<span class="slot-icon">✦</span><span class="slot-num">' + i + "</span>";
}
@ -214,10 +214,10 @@
deckSlot.title = "Dein Deck";
deckSlot.innerHTML = `
<div class="deck-stack-wrap">
<img class="deck-card-back deck-shadow-3" src="/images/playcards/rueckseite.png">
<img class="deck-card-back deck-shadow-2" src="/images/playcards/rueckseite.png">
<img class="deck-card-back deck-shadow-1" src="/images/playcards/rueckseite.png">
<img class="deck-card-top" src="/images/playcards/rueckseite.png">
<img class="deck-card-back deck-shadow-3" src="/images/cards/rueckseite.png">
<img class="deck-card-back deck-shadow-2" src="/images/cards/rueckseite.png">
<img class="deck-card-back deck-shadow-1" src="/images/cards/rueckseite.png">
<img class="deck-card-top" src="/images/cards/rueckseite.png">
</div>
<span class="deck-count" id="deck-count">—</span>`;
hand.appendChild(deckSlot);
@ -228,7 +228,7 @@
const s = document.createElement("div");
s.className = "hand-slot hand-slot-card";
s.id = id;
s.innerHTML = `<img src="/images/playcards/Silberklinge.png"
s.innerHTML = `<img src="/images/cards/Silberklinge.png"
style="width:100%;height:100%;object-fit:cover;border-radius:7px;">`;
hand.appendChild(s);
});
@ -268,7 +268,8 @@
const slot = document.getElementById(id);
if (!slot || !card) return;
slot.innerHTML = card.image
? `<img src="/images/playcards/${card.image}"
? `<img src="/images/cards/${card.image}"
onerror="this.src='/images/cards/rueckseite.png'"
title="${card.name}"
style="width:100%;height:100%;object-fit:cover;border-radius:7px;">`
: `<div style="display:flex;flex-direction:column;align-items:center;