Files
oikos/public/index.html
T
ulsklyc b08ba42b89 fix: CSP-Verletzung durch Inline-Script (SW-Registrierung)
Das Inline-Script in index.html für die Service-Worker-Registrierung
wurde von der Content-Security-Policy blockiert (kein 'unsafe-inline'
in script-src). Ausgelagert nach /sw-register.js ('self' erlaubt).

Außerdem: rel="preload" → rel="modulepreload" für ES-Module (korrekte
Browser-Semantik, behebt die Preload-Warnungen in der Console).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-25 09:36:10 +01:00

59 lines
2.3 KiB
HTML

<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
<meta name="theme-color" content="#007AFF" />
<meta name="description" content="Oikos — Familienplaner" />
<title>Oikos</title>
<!-- PWA -->
<link rel="manifest" href="/manifest.json" />
<link rel="apple-touch-icon" href="/icons/apple-touch-icon.png" />
<link rel="icon" type="image/x-icon" href="/favicon.ico" />
<link rel="icon" type="image/png" sizes="32x32" href="/icons/favicon-32.png" />
<!-- DNS-Prefetch + Preconnect für externe Ressourcen -->
<link rel="preconnect" href="https://unpkg.com" crossorigin />
<link rel="dns-prefetch" href="https://openweathermap.org" />
<!-- Preload: kritische ES-Module (modulepreload ist korrekt für type="module") -->
<link rel="modulepreload" href="/api.js" />
<link rel="modulepreload" href="/router.js" />
<!-- Styles -->
<link rel="stylesheet" href="/styles/tokens.css" />
<link rel="stylesheet" href="/styles/reset.css" />
<link rel="stylesheet" href="/styles/layout.css" />
<link rel="stylesheet" href="/styles/login.css" />
<link rel="stylesheet" href="/styles/dashboard.css" />
<link rel="stylesheet" href="/styles/tasks.css" />
<link rel="stylesheet" href="/styles/shopping.css" />
<link rel="stylesheet" href="/styles/meals.css" />
<link rel="stylesheet" href="/styles/calendar.css" />
<link rel="stylesheet" href="/styles/notes.css" />
<link rel="stylesheet" href="/styles/contacts.css" />
<link rel="stylesheet" href="/styles/budget.css" />
<link rel="stylesheet" href="/styles/settings.css" />
<!-- Lucide Icons (CDN) -->
<script src="https://unpkg.com/lucide@latest/dist/umd/lucide.min.js"></script>
</head>
<body>
<!-- App-Shell — wird durch JavaScript gefüllt -->
<div id="app" class="app-shell">
<!-- Skeleton-Loading während Initialisierung -->
<div id="app-loading" class="app-loading" aria-live="polite" aria-label="Lade Oikos…">
<div class="app-loading__logo">Oikos</div>
</div>
</div>
<!-- Module (ES-Module, kein Bundler) -->
<script type="module" src="/api.js"></script>
<script type="module" src="/router.js"></script>
<!-- Service Worker registrieren -->
<script src="/sw-register.js" defer></script>
</body>
</html>