diff --git a/src/gateway/public-gateway.mjs b/src/gateway/public-gateway.mjs index 6f74112..aa63bcd 100644 --- a/src/gateway/public-gateway.mjs +++ b/src/gateway/public-gateway.mjs @@ -547,7 +547,7 @@ function injectRelayChrome(html, name, reqPath, subBase, opts) { // Persistent chip — shown on both forms. On the subdomain form it's the // only trust indicator; on the path form it stays after the banner is // dismissed so the user still knows they're on a relay. - const chip = `
+ const chip = `
`; +`; // Full banner — path form only. - const banner = pathForm ? `
+ const banner = pathForm ? `
⚠ Relayed site ${esc(name)} is being served through navigate.st. Scripts here run under the gateway's origin — do not sign in or paste a recovery phrase. @@ -570,9 +570,9 @@ ${pathForm ? `Stay here Install Theseus -
` : ""; +
` : ""; - const script = ``; +})();`; const combined = banner + chip + script; // Insert just after if present, otherwise at the start of the document.