Stefan Hacker
eccce7e539
- F-15 CSRF-Logout: /logout nur noch via POST mit CSRF-Token; Sidebar-Link ist jetzt ein POST-Formular. Schuetzt vor Cross-Site-Logout (SameSite=Lax greift bei Top-Level-GET nicht). - F-16 SRI: Subresource-Integrity-Hashes (sha384) + crossorigin fuer alle CDN-Ressourcen (Bootstrap CSS/JS, Bootstrap-Icons). - F-17: Permissions-Policy-Header (deaktiviert ungenutzte Browser-Features). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
22 lines
951 B
CSS
22 lines
951 B
CSS
:root { --sidebar-bg: #1e2a38; --sidebar-hover: #2d3f52; }
|
|
body { background: #f4f6f9; min-height: 100vh; }
|
|
#sidebar {
|
|
width: 220px; min-width: 220px; min-height: 100vh;
|
|
background: var(--sidebar-bg); color: #cdd6e0;
|
|
}
|
|
#sidebar .brand { color: #4fc3f7; font-weight: 700; font-size: 1.1rem; }
|
|
#sidebar .nav-link {
|
|
color: #b0bec5; border-radius: 6px; padding: .5rem .75rem;
|
|
margin-bottom: 2px; transition: background .15s;
|
|
}
|
|
#sidebar .nav-link:hover, #sidebar .nav-link.active {
|
|
background: var(--sidebar-hover); color: #fff;
|
|
}
|
|
#sidebar .nav-link i { width: 1.3em; }
|
|
#sidebar button.nav-link { background: none; border: 0; width: 100%; text-align: left; cursor: pointer; }
|
|
#sidebar hr { border-color: var(--sidebar-hover); }
|
|
.main-content { flex: 1; padding: 2rem; min-width: 0; }
|
|
.card { border: none; box-shadow: 0 1px 4px rgba(0,0,0,.08); }
|
|
.badge-ip { font-family: monospace; font-size: .85em; }
|
|
.va-baseline { vertical-align: baseline; }
|