From f5e82162c1c6e6bdc0cd29f287c4446b679b61a5 Mon Sep 17 00:00:00 2001
From: Paul Bakaus <paul.bakaus@gmail.com>
Date: Thu, 23 Apr 2026 18:21:26 -0700
Subject: [PATCH] fix(site): strip dev-only live.js inject tags from production
 HTML

public/index.html and public/privacy.html had stale
`<script src="http://localhost:8400/live.js">` scaffolding from a
local /impeccable live session. On impeccable.style (Cloudflare) this
fired Chrome's private-network-access prompt on every page load. The
inject is dev-only; normally stripped by live-server.mjs stop, but
these two slipped through.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 public/index.html   | 3 ---
 public/privacy.html | 3 ---
 2 files changed, 6 deletions(-)

diff --git a/public/index.html b/public/index.html
index 78a359b12..0c4b70d45 100644
--- a/public/index.html
+++ b/public/index.html
@@ -1219,8 +1219,5 @@
 
   <script type="module" src="./app.js"></script>
 
-<!-- impeccable-live-start -->
-<script src="http://localhost:8400/live.js"></script>
-<!-- impeccable-live-end -->
 </body>
 </html>
diff --git a/public/privacy.html b/public/privacy.html
index d32f34df3..21421ef0e 100644
--- a/public/privacy.html
+++ b/public/privacy.html
@@ -76,8 +76,5 @@
   <h2>Contact</h2>
   <p>Questions about this policy? Open an issue on <a href="https://github.com/pbakaus/impeccable">GitHub</a> or reach out to <a href="https://x.com/pbakaus">@pbakaus</a>.</p>
   </main>
-<!-- impeccable-live-start -->
-<script src="http://localhost:8400/live.js"></script>
-<!-- impeccable-live-end -->
 </body>
 </html>