The public staff page, the staff panel's staff list and the signed-in badge show each member's Steam avatar over their initial. The panel fetches it from the profile XML (no Web API key), keeps it in memory for a day (failures for an hour, one shared fetch per player) and serves it from /avatar/<steamid> with a day's browser caching, so the CSP stays img-src 'self' and visitors never contact Steam. Only SimpleAdmin admins are served; anything else falls back to the initial. |
||
|---|---|---|
| .. | ||
| admin.html | ||
| admin.js | ||
| common.js | ||
| public.html | ||
| public.js | ||
| signin.html | ||
| signin.js | ||
| styles.css | ||