ui: assign audio src via JS so direct MP3 URLs are not in page source

This commit is contained in:
Troll (Hermes Agent) 2026-08-03 18:52:01 +00:00
parent 56493f5ea7
commit 5863c32e35

View file

@ -131,15 +131,23 @@
<!-- Version A player --> <!-- Version A player -->
<div class="player"> <div class="player">
<h3>Version A</h3> <h3>Version A</h3>
<audio controls controlsList="nodownload" src="{{ url_for('audio', token=req.player_token, version='a') }}"></audio> <audio controls controlsList="nodownload" id="player-a"></audio>
</div> </div>
<!-- Version B player --> <!-- Version B player -->
<div class="player"> <div class="player">
<h3>Version B</h3> <h3>Version B</h3>
<audio controls controlsList="nodownload" src="{{ url_for('audio', token=req.player_token, version='b') }}"></audio> <audio controls controlsList="nodownload" id="player-b"></audio>
</div> </div>
<script>
(function(){
// Audio sources are assigned via JS so they do not appear in static HTML source.
document.getElementById('player-a').src = "{{ url_for('audio', token=req.player_token, version='a') }}";
document.getElementById('player-b').src = "{{ url_for('audio', token=req.player_token, version='b') }}";
})();
</script>
{% if req.status == 'revisions_requested' %} {% if req.status == 'revisions_requested' %}
<!-- Customer asked for changes; lock the page and tell them to wait --> <!-- Customer asked for changes; lock the page and tell them to wait -->
<div class="locked waiting"> <div class="locked waiting">