From 2eb157514a182079550ac4223ff775020d0868eb Mon Sep 17 00:00:00 2001
From: Anthony Ettinger <anthony@chovy.com>
Date: Sun, 4 Oct 2026 19:27:30 +0000
Subject: [PATCH] chore: remove decommissioned feedback.profullstack.com widget

The feedback.profullstack.com feedback widget has been decommissioned.
Remove its embed script from the static pages and drop the host from
the Caddyfile Content-Security-Policy (script-src, connect-src, img-src,
frame-src), keeping the policy valid.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 Caddyfile                     | 2 +-
 apps/web/public/404.html      | 1 -
 apps/web/public/index.html    | 1 -
 apps/web/public/login.html    | 1 -
 apps/web/public/privacy.html  | 1 -
 apps/web/public/settings.html | 1 -
 6 files changed, 1 insertion(+), 6 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index 25b26266..79c5c8de 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -34,7 +34,7 @@
 		X-Frame-Options "DENY"
 		Referrer-Policy "strict-origin-when-cross-origin"
 		Permissions-Policy "camera=(), microphone=(), geolocation=(), browsing-topics=()"
-		Content-Security-Policy "default-src 'self'; script-src 'self' https://crawlproof.com https://feedback.profullstack.com; connect-src 'self' https://crawlproof.com https://feedback.profullstack.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://feedback.profullstack.com; font-src 'self'; frame-src 'self' https://feedback.profullstack.com; base-uri 'self'; form-action 'self'; frame-ancestors 'none'"
+		Content-Security-Policy "default-src 'self'; script-src 'self' https://crawlproof.com; connect-src 'self' https://crawlproof.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; frame-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'"
 		-Server
 	}
 
diff --git a/apps/web/public/404.html b/apps/web/public/404.html
index 1c247e73..c79dbda5 100644
--- a/apps/web/public/404.html
+++ b/apps/web/public/404.html
@@ -18,6 +18,5 @@
 <body>
   <h1>4<span class="accent">0</span>4</h1>
   <p>That page isn't here. Try the <a href="/">homepage</a>.</p>
-  <script async src="https://feedback.profullstack.com/embed/profullstack-feedback.js" data-property="tronbrowser.dev"></script>
 </body>
 </html>
diff --git a/apps/web/public/index.html b/apps/web/public/index.html
index c202cb0e..83959d7b 100644
--- a/apps/web/public/index.html
+++ b/apps/web/public/index.html
@@ -275,6 +275,5 @@ <h3>How do I install it?</h3>
 <script src="/app.js?v=0.1.8"></script>
 <!-- CrawlProof: privacy-friendly, cookieless analytics. -->
 <script data-site="75ea2754-bc0e-435e-ad49-afd9beb64b72" src="https://crawlproof.com/stats.js" async></script>
-  <script async src="https://feedback.profullstack.com/embed/profullstack-feedback.js" data-property="tronbrowser.dev"></script>
 </body>
 </html>
diff --git a/apps/web/public/login.html b/apps/web/public/login.html
index 6c4b0255..2462bd8d 100644
--- a/apps/web/public/login.html
+++ b/apps/web/public/login.html
@@ -45,5 +45,4 @@
     <a class="home" href="/">← back to tronbrowser.dev</a>
   </div>
   <script src="/login.js"></script>
-  <script async src="https://feedback.profullstack.com/embed/profullstack-feedback.js" data-property="tronbrowser.dev"></script>
 </body></html>
diff --git a/apps/web/public/privacy.html b/apps/web/public/privacy.html
index b02190fb..f2e7478d 100644
--- a/apps/web/public/privacy.html
+++ b/apps/web/public/privacy.html
@@ -46,6 +46,5 @@ <h2>Contact</h2>
   TronBrowser is published by <a href="https://profullstack.com">Profullstack, Inc.</a></p>
 
   <p class="muted">TronBrowser is free and open source under the MIT License.</p>
-  <script async src="https://feedback.profullstack.com/embed/profullstack-feedback.js" data-property="tronbrowser.dev"></script>
 </body>
 </html>
diff --git a/apps/web/public/settings.html b/apps/web/public/settings.html
index 246c3ac9..15cf1e26 100644
--- a/apps/web/public/settings.html
+++ b/apps/web/public/settings.html
@@ -132,5 +132,4 @@ <h3 style="color:var(--muted);font-size:13px;margin-top:24px">Import / export OP
   </div>
 
   <script type="module" src="/settings.js"></script>
-  <script async src="https://feedback.profullstack.com/embed/profullstack-feedback.js" data-property="tronbrowser.dev"></script>
 </body></html>