- Shipped
- August 25, 2026 at 3:58 PM UTC
- Author
- kamo
- Commit
- bf1b495
Where the /network/create Website field turns into logo, colour and background suggestions on the three branding steps. Records two things that are easy to get wrong later: why the fetch has to happen server-side at all (CORS, canvas tainting and the page's own img-src policy each rule out the browser doing it), and why the one control this relaxes -- redirects, which SafeImageFetcher refuses outright -- is followed by hand with every hop re-validated instead. Also records the ceiling. There is no headless browser here, so the signals are weighted toward the ones a JS-rendered site still ships in its initial document for crawlers: manifest, JSON-LD, og tags, favicons.