4 Commits

Author SHA1 Message Date
LC mac
02f58f5ef0 basicSsl() removal ; Commenting CSP in index.html for dev 2026-02-19 23:39:49 +08:00
LC mac
4da39b7b89 security improvement and bugs fixing; modify makefile 2026-02-18 03:24:05 +08:00
LC mac
005fb292b4 fix: Strengthen CSP and improve network button UX
- Fix CSP: Change connect-src from 'self' to 'none' (strict enforced blocking)
- Improve UX: Rename button from 'Blocked/Active' to 'Internet OFF/ON' (layman terms)
- Add clear tooltips explaining security implications:
  - Internet OFF: "Network disabled - Maximum security (no data can leave device)"
  - Internet ON: "Network enabled - Normal operation (browser CSP blocks connections)"
- Update comment to describe functionality: "Click to disable/enable internet access for maximum security"

This implements Option B from security audit: strict CSP enforcement with user-friendly interface explanations.
2026-02-12 23:16:26 +08:00
LC mac
ae0c32fe67 fix built by serving https 2026-02-12 19:08:46 +08:00