github.com/google/osv-scalibr@v0.4.1/detector/weakcredentials/codeserver/testdata/auth_enabled.html (about)

     1  <!doctype html>
     2  <html lang="en">
     3    <head>
     4      <meta charset="utf-8" />
     5      <meta
     6        name="viewport"
     7        content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no"
     8      />
     9      <meta
    10        http-equiv="Content-Security-Policy"
    11        content="style-src 'self'; script-src 'self' 'unsafe-inline'; manifest-src 'self'; img-src 'self' data:; font-src 'self' data:;"
    12      />
    13      <meta name="color-scheme" content="light dark" />
    14      <title>code-server login</title>
    15      <link rel="icon" href="./_static/src/browser/media/favicon-dark-support.svg" />
    16      <link rel="alternate icon" href="./_static/src/browser/media/favicon.ico" />
    17      <link rel="manifest" href="./manifest.json" crossorigin="use-credentials" />
    18      <link rel="apple-touch-icon" sizes="192x192" href="./_static/src/browser/media/pwa-icon-192.png" />
    19      <link rel="apple-touch-icon" sizes="512x512" href="./_static/src/browser/media/pwa-icon-512.png" />
    20      <link href="./_static/src/browser/pages/global.css" rel="stylesheet" />
    21      <link href="./_static/src/browser/pages/login.css" rel="stylesheet" />
    22      <meta id="coder-options" data-settings="{&quot;base&quot;:&quot;.&quot;,&quot;csStaticBase&quot;:&quot;./_static&quot;,&quot;codeServerVersion&quot;:&quot;4.99.0&quot;}" />
    23    </head>
    24    <body>
    25      <div class="center-container">
    26        <div class="card-box">
    27          <div class="header">
    28            <h1 class="main">Welcome to code-server</h1>
    29            <div class="sub">Please log in below. Check the config file at &#x2F;root&#x2F;.config&#x2F;code-server&#x2F;config.yaml for the password.</div>
    30          </div>
    31          <div class="content">
    32            <form class="login-form" method="post">
    33              <input class="user" type="text" autocomplete="username" />
    34              <input id="base" type="hidden" name="base" value="." />
    35              <input id="href" type="hidden" name="href" value="" />
    36              <div class="field">
    37                <input
    38                  required
    39                  autofocus
    40                  class="password"
    41                  type="password"
    42                  placeholder="PASSWORD"
    43                  name="password"
    44                  autocomplete="current-password"
    45                />
    46                <input class="submit -button" value="SUBMIT" type="submit" />
    47              </div>
    48            </form>
    49          </div>
    50        </div>
    51      </div>
    52      <script>
    53        // Inform the backend about the path since the proxy might have rewritten
    54        // it out of the headers and cookies must be set with absolute paths.
    55        const el = document.getElementById("href")
    56        if (el) {
    57          el.value = location.href
    58        }
    59      </script>
    60    </body>
    61  </html>