Configure analytics URL and obfuscate API key

Set the Horchposten backend URL in the shell data attribute and replace the plaintext key lookup with XOR-encoded byte arrays decoded at runtime, so the API key never appears as a readable string in source, HTML, or the compiled WASM binary.
2026-03-08 19:52:34 +00:00
parent 702dbd4f9a
commit 5793af4896
2 changed files with 11 additions and 7 deletions
--- a/web/shell.html
+++ b/web/shell.html
@@ -108,8 +108,7 @@
 </head>
 <body>
  <div id="canvas-container"
-       data-analytics-url=""
-       data-analytics-key="">
+       data-analytics-url="https://horchposten.schick-web.site">
    <canvas class="emscripten" id="canvas" tabindex="1"
            width="640" height="360"></canvas>
  </div>