plainleaf/client/html/auth.html

<!doctype html>
<html lang="zh-CN">
    <head>
        <meta charset="utf-8" />
        <meta
            content="width=device-width, initial-scale=1, maximum-scale=1"
            name="viewport"
        />
        <base href="{{ host_prefix | safe }}/" />
        <script>
            try { document.documentElement.dataset.skin = localStorage.getItem("plainleaf.skin") || "cloudleaf"; } catch (_) { document.documentElement.dataset.skin = "cloudleaf"; }
        </script>
        <link rel="icon" type="image/png" href=".client/favicon-96x96.png?v=plainleaf-1" sizes="96x96" />
        <link rel="icon" type="image/svg+xml" href=".client/favicon.svg?v=plainleaf-1" />
        <link rel="shortcut icon" href=".client/favicon.ico?v=plainleaf-1" />
        <link rel="stylesheet" href=".client/app.css" />
        <title>登录 · Plainleaf</title>
    </head>

    <body class="sb-standalone">
        <!-- Config crosses over as data attributes, not a JSON island: the
             template autoescapes (the space name is user-controlled), and
             attribute escaping is the case autoescaping handles correctly.
             A JSON <script> island would arrive HTML-escaped and unparseable,
             and un-escaping it would let a space named "</script>…" break out. -->
        <div
            id="root"
            data-space-name="{{ space_name }}"
            data-encryption-salt="{{ encryption_salt }}"
            data-remember-me-days="{{ remember_me_days }}"
            data-account-managed="{{ account_managed }}"
        ></div>
        <script type="module" src=".client/auth.js"></script>
    </body>
</html>