fix: hide backend URL from logo by fetching as blob

Logo images were exposing the backend API URL in the DOM via <img src>.
Now preloadLogo() fetches the image as a blob and serves it through
URL.createObjectURL(), so only blob: URLs appear in the page source.
Blob is invalidated on logo upload/delete.
This commit is contained in:
Fringg
2026-02-08 17:40:24 +03:00
parent a449dd6981
commit de09ea039b
5 changed files with 53 additions and 33 deletions

View File

@@ -79,7 +79,7 @@ export default function Login() {
queryFn: async () => {
const data = await brandingApi.getBranding();
setCachedBranding(data);
preloadLogo(data);
await preloadLogo(data);
return data;
},
staleTime: 60000,