mirror of
https://github.com/PR0M3TH3AN/VoxVera.git
synced 2026-11-04 21:50:40 +00:00
New standalone /safety page (safety.html / safety.js), localized across all 14 languages, in plain language: what VoxVera protects, what it does NOT (relays see your IP; the anonymous key is stored unencrypted; a short PIN won't stop a targeted attacker; published events are public and permanent; nsec-paste risk; reports are public; the host/relays still see requests), and operational tips (Tor/VPN, disposable keys, signer apps). Linked from the editor and the board. Aimed at the activist audience the aesthetic invites — being honest about limits matters more than features. Also adds static site-wide Open Graph / Twitter-card meta to the home, board, and safety pages so a shared voxvera.org link renders a real title/description instead of nothing. Per-flyer previews remain a deliberate non-goal: the naddr lives in the URL fragment (invisible to servers) and per-flyer meta would require server-side rendering, which is out of scope for a purely static site. i18n guard extended to SAFETY_UI (keys + equal bullet-list lengths per language). New cross-engine test covers the page's sections, localization, RTL, and the editor/board links. Full suite 354 passing. Co-Authored-By: Claude Opus 4.8 <[email protected]>
126 lines
6.8 KiB
HTML
126 lines
6.8 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>VoxVera — Bulletin Board</title>
|
|
<!-- Root-absolute asset paths: with Vercel cleanUrls + trailingSlash this
|
|
page is served at /board/, so relative paths would resolve to
|
|
/board/... and 404. -->
|
|
<link rel="icon" type="image/svg+xml" href="/favicon.svg">
|
|
<link rel="stylesheet" href="/nostr-client.css">
|
|
<meta name="description" content="Recent VoxVera flyers published to the Nostr relays, filtered by your web of trust.">
|
|
<meta property="og:type" content="website">
|
|
<meta property="og:site_name" content="VoxVera">
|
|
<meta property="og:title" content="VoxVera — Bulletin Board">
|
|
<meta property="og:description" content="Recent VoxVera flyers published to the Nostr relays, filtered by your web of trust.">
|
|
<meta property="og:url" content="https://voxvera.org/board">
|
|
<meta name="twitter:card" content="summary">
|
|
<meta name="twitter:title" content="VoxVera — Bulletin Board">
|
|
<meta name="twitter:description" content="Recent VoxVera flyers published to the Nostr relays, filtered by your web of trust.">
|
|
</head>
|
|
<body class="board-page">
|
|
<header class="topbar">
|
|
<div>
|
|
<h1 id="board-title">Bulletin Board</h1>
|
|
<p id="board-subtitle">Most recent flyers published to the relays.</p>
|
|
</div>
|
|
<div class="topbar-controls">
|
|
<a id="board-back" class="board-back" href="/">Back to VoxVera</a>
|
|
<a id="board-safety" class="board-back" href="/safety">Safety & privacy</a>
|
|
<span id="board-identity" class="board-identity" hidden>
|
|
<span id="board-identity-npub" class="board-npub"></span>
|
|
<button id="board-disconnect" type="button" class="board-disconnect">Disconnect</button>
|
|
</span>
|
|
<select id="board-lang" aria-label="Language"></select>
|
|
</div>
|
|
</header>
|
|
<main class="board-main">
|
|
<!-- Login gate: the board is visible only to a connected Nostr identity.
|
|
The data itself is public on the relays, so this is not access
|
|
control — it supplies the viewer's identity so a later web-of-trust
|
|
filter can show them a trustworthy board (see docs/roadmap.md). -->
|
|
<section id="board-gate" class="board-gate">
|
|
<h2 id="board-gate-title">Connect to view the board</h2>
|
|
<p id="board-gate-body">Connect a Nostr identity to view the bulletin board.</p>
|
|
<div class="board-connect-methods">
|
|
<button id="board-connect" type="button" class="board-connect">Browser extension (NIP-07)</button>
|
|
<button id="board-connect-nsec-toggle" type="button" class="board-connect-alt">Use a private key (nsec)</button>
|
|
<button id="board-generate" type="button" class="board-connect-alt">Create a new key</button>
|
|
</div>
|
|
<!-- nsec import: the key is decoded in-page to derive the pubkey, then
|
|
discarded. Only the pubkey is persisted (board never signs). -->
|
|
<div id="board-nsec-row" class="board-nsec-row" hidden>
|
|
<input id="board-nsec-input" type="password" autocomplete="off" spellcheck="false" placeholder="nsec1…">
|
|
<button id="board-nsec-submit" type="button" class="board-connect">Connect</button>
|
|
<p id="board-nsec-note" class="board-key-note"></p>
|
|
</div>
|
|
<!-- Generated key reveal: shown once so the user can save the secret. -->
|
|
<div id="board-generated" class="board-generated" hidden>
|
|
<p id="board-gen-warning" class="board-key-warning"></p>
|
|
<label class="board-key-field">npub
|
|
<input id="board-gen-npub" readonly>
|
|
</label>
|
|
<label class="board-key-field">nsec
|
|
<span class="board-key-secret">
|
|
<input id="board-gen-nsec" type="password" readonly>
|
|
<button id="board-gen-copy" type="button" class="board-disconnect">Copy</button>
|
|
</span>
|
|
</label>
|
|
<button id="board-gen-continue" type="button" class="board-connect">Continue</button>
|
|
</div>
|
|
<p id="board-gate-error" class="board-gate-error" role="alert" hidden></p>
|
|
</section>
|
|
<div id="board-content" hidden>
|
|
<div class="board-filter">
|
|
<span id="board-filter-note" class="board-filter-note"></span>
|
|
<span id="board-blocked-note" class="board-blocked-note" hidden>
|
|
<span id="board-blocked-count">0</span> · <button id="board-unblock-all" type="button" class="board-action">Clear blocked</button>
|
|
</span>
|
|
<label class="board-show-all">
|
|
<input type="checkbox" id="board-mine-only">
|
|
<span id="board-mine-only-label">My flyers</span>
|
|
</label>
|
|
<label class="board-show-all">
|
|
<input type="checkbox" id="board-show-all">
|
|
<span id="board-show-all-label">Show all flyers</span>
|
|
</label>
|
|
</div>
|
|
<p id="board-status">Loading…</p>
|
|
<table class="board-table" id="board-table">
|
|
<thead><tr id="board-head"></tr></thead>
|
|
<tbody id="board-rows"></tbody>
|
|
</table>
|
|
</div>
|
|
</main>
|
|
|
|
<div id="board-delete-modal" class="modal-overlay" hidden>
|
|
<div class="modal" role="dialog" aria-modal="true" aria-labelledby="board-delete-title">
|
|
<h2 id="board-delete-title">Delete this flyer?</h2>
|
|
<p id="board-delete-message">This requests deletion from the relays and hides it in VoxVera. Deletion can't be guaranteed across every relay.</p>
|
|
<div class="modal-actions">
|
|
<button id="board-delete-cancel" type="button" class="board-action">Cancel</button>
|
|
<button id="board-delete-confirm" type="button" class="board-action danger">Delete</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="board-report-modal" class="modal-overlay" hidden>
|
|
<div class="modal" role="dialog" aria-modal="true" aria-labelledby="board-report-title">
|
|
<h2 id="board-report-title">Report this flyer?</h2>
|
|
<p id="board-report-message">This publishes a public report to the relays and hides the flyer for you. Reports can't be undone.</p>
|
|
<select id="board-report-category" class="board-report-category" aria-label="Report category"></select>
|
|
<input id="board-report-reason" type="text" autocomplete="off" spellcheck="false" placeholder="Reason (optional)" maxlength="280">
|
|
<div class="modal-actions">
|
|
<button id="board-report-cancel" type="button" class="board-action">Cancel</button>
|
|
<button id="board-report-confirm" type="button" class="board-action danger">Submit report</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<script src="/locales.js"></script>
|
|
<script src="/vendor/nostr-tools/nostr.bundle.js"></script>
|
|
<script src="/board.js"></script>
|
|
</body>
|
|
</html>
|