Don't ship a personal profile; pin the Worker to the Pages origin

The repo is public and deployed now, so two things needed tightening:

- index.html: DEFAULT_PROFILE is empty instead of a Steam vanity name. The
  page no longer tries to sync somebody else's account on first load, and
  no personal handle ships in the repo. Anyone running it locally keeps
  their profile in localStorage, so existing local use is unaffected.
- steam-proxy-worker.js: ALLOW_ORIGIN pinned to
  https://rain.pages.melonbread.xyz rather than '*', so only the deployed
  page can call the Worker if it is ever deployed.
- README: record the deployment URL and use a neutral example vanity name.
This commit is contained in:
Rain 2026-09-15 17:19:03 -04:00
parent f558eb439e
commit 4d5545e6c5
3 changed files with 11 additions and 7 deletions

View file

@ -14,6 +14,8 @@ A single-file, offline-friendly companion page for 100%-ing **Metal Gear Solid 2
## Hosting it (GitHub Pages, Netlify, Cloudflare Pages, Neocities…)
**This copy is deployed at <https://rain.pages.melonbread.xyz/la-li-lu-le-lo/>**, served from the `pages` branch of <https://git.melonbread.xyz/rain/la-li-lu-le-lo>.
**The page itself hosts fine as-is.** It is one static HTML file with all the guide data, the 10 area maps and the colour coding baked in, and it stores progress in the browser's `localStorage`. Drop it in a repo, enable Pages, done. No build step, no dependencies.
Two things behave differently on a static host:
@ -65,11 +67,11 @@ Double-click `index.html`. Everything works except live Steam sync. Note that op
## Steam sync
- Enter your **vanity name** (e.g. `mrmelonbread`) or **SteamID64** on the **🔄 Steam Sync** tab and hit **Sync now**.
- Enter your **vanity name** (e.g. `gaben`) or **SteamID64** on the **🔄 Steam Sync** tab and hit **Sync now**.
- It re-syncs automatically every time the page loads.
- Achievements you already own get a `STEAM ✓` badge and a blue edge, and are counted as done.
- Use the **⬇ Missing on Steam** filter on the Achievements tab to see only what is left.
- Your profile is pre-filled. Clear it with **Forget profile**.
- No profile is pre-filled in the public repo — type yours on the Steam Sync tab once and it is remembered in this browser.
**If it fails,** the page tells you why. The usual cause is a private profile:
Steam → your profile → **Edit Profile → Privacy Settings → Game details → Public**.