Astra
861692c534
The public staff page, the staff panel's staff list and the signed-in badge show each member's Steam avatar over their initial. The panel fetches it from the profile XML (no Web API key), keeps it in memory for a day (failures for an hour, one shared fetch per player) and serves it from /avatar/<steamid> with a day's browser caching, so the CSP stays img-src 'self' and visitors never contact Steam. Only SimpleAdmin admins are served; anything else falls back to the initial. |
||
|---|---|---|
| .. | ||
| assets | ||
| actions.go | ||
| admin.go | ||
| auth.go | ||
| avatar.go | ||
| public.go | ||
| server.go | ||
| site.go | ||
| staff.go | ||