<!DOCTYPE html>
<html lang="{{ page_language }}">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  {% if not env("HWARO_DEV", default="") %}
  <!-- CSP via <meta> because GitHub Pages cannot set response headers, so HSTS /
       frame-ancestors / X-Content-Type-Options (all header-only) are out of
       scope here. 'upgrade-insecure-requests' is intentionally omitted: prod is
       HTTPS-only with no mixed content, and that directive would upgrade every
       asset to https:// and break `hwaro serve` over http://localhost.
       Set HWARO_DEV=1 (e.g. `HWARO_DEV=1 hwaro serve -i docs`) to drop the CSP
       locally so hwaro's inline live-reload script is allowed to run. -->
  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; base-uri 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; manifest-src 'self'; object-src 'none'; form-action 'self'">
  {% endif %}
  <meta name="description" content="{{ page.description | e }}">
  <meta name="color-scheme" content="dark">
  <meta name="theme-color" content="#31365e">
  <title>{{ page.title | e }} · {{ site.title | e }}</title>
  {{ og_all_tags }}
  {{ hreflang_tags }}
  <link rel="canonical" href="{{ seo.canonical_url }}">
  <link rel="alternate" type="application/rss+xml" title="{{ site.title | e }}" href="{{ base_url }}/rss.xml">
  {% if page.url == "/" %}
  <script type="application/ld+json">{"@context":"https://schema.org","@type":"SoftwareApplication","name":"Dalfox","applicationCategory":"SecurityApplication","operatingSystem":"macOS, Linux, Windows","description":"Powerful open-source XSS scanner and automation utility — reflected, stored, DOM-based with AST-level verification.","url":"{{ base_url }}/","downloadUrl":"https://github.com/hahwul/dalfox/releases","softwareHelp":"{{ base_url }}/getting-started/","license":"https://opensource.org/licenses/MIT","isAccessibleForFree":true,"codeRepository":"https://github.com/hahwul/dalfox","author":{"@type":"Person","name":"hahwul","url":"https://www.hahwul.com"},"offers":{"@type":"Offer","price":"0","priceCurrency":"USD"}}</script>
  {% else %}
  {{ jsonld }}
  {% endif %}
  <link rel="stylesheet" href="{{ base_url }}/css/fonts.css">
  <link rel="stylesheet" href="{{ base_url }}/css/style.css">
  <script src="{{ base_url }}/js/sidebar-init.js"></script>
  <link rel="icon" type="image/png" href="/icons/favicon-96x96.png" sizes="96x96" />
  <link rel="icon" type="image/svg+xml" href="/icons/favicon.svg" />
  <link rel="shortcut icon" href="/icons/favicon.ico" />
  <link rel="apple-touch-icon" sizes="180x180" href="/icons/apple-touch-icon.png" />
  <meta name="apple-mobile-web-app-title" content="Dalfox" />
  <link rel="manifest" href="/icons/site.webmanifest" />
  {{ highlight_css }}
  {{ auto_includes_css }}
</head>
<body data-section="{{ page.section }}">
  <a class="skip-link" href="#main">Skip to content</a>
  <header class="site-header">
    <div class="header-inner">
      <div class="header-left">
        <button class="hamburger" aria-label="Menu" aria-controls="docs-sidebar" aria-expanded="false">
          <span></span><span></span><span></span>
        </button>
        <a href="{{ base_url }}/" class="header-logo">
          <img src="/images/logo_solo.webp" style="width: 30px;" alt="" aria-hidden="true">
          <span class="header-logo-text">DALFOX</span>
        </a>
        <nav class="header-nav">
          <a href="{{ base_url }}/getting-started/">Getting Started</a>
          <a href="{{ base_url }}/guide/">Guide</a>
          <a href="{{ base_url }}/integrations/">Integrations</a>
          <a href="{{ base_url }}/reference/">Reference</a>
        </nav>
      </div>
      <div class="header-right">
        <button class="search-trigger" type="button" title="Search">
          <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="11" cy="11" r="8"/><path d="m21 21-4.3-4.3"/></svg>
          <span>Search</span>
          <kbd>⌘K</kbd>
        </button>
        <a class="header-iconlink" href="https://github.com/hahwul/dalfox" target="_blank" rel="noopener" aria-label="GitHub">
          <svg width="18" height="18" viewBox="0 0 24 24" fill="currentColor"><path d="M12 0c-6.626 0-12 5.373-12 12 0 5.302 3.438 9.8 8.207 11.387.599.111.793-.261.793-.577v-2.234c-3.338.726-4.033-1.416-4.033-1.416-.546-1.387-1.333-1.756-1.333-1.756-1.089-.745.083-.729.083-.729 1.205.084 1.839 1.237 1.839 1.237 1.07 1.834 2.807 1.304 3.492.997.107-.775.418-1.305.762-1.604-2.665-.305-5.467-1.334-5.467-5.931 0-1.311.469-2.381 1.236-3.221-.124-.303-.535-1.524.117-3.176 0 0 1.008-.322 3.301 1.23.957-.266 1.983-.399 3.003-.404 1.02.005 2.047.138 3.006.404 2.291-1.552 3.297-1.23 3.297-1.23.653 1.653.242 2.874.118 3.176.77.84 1.235 1.911 1.235 3.221 0 4.609-2.807 5.624-5.479 5.921.43.372.823 1.102.823 2.222v3.293c0 .319.192.694.801.576 4.765-1.589 8.199-6.086 8.199-11.386 0-6.627-5.373-12-12-12z"/></svg>
        </a>
      </div>
    </div>
  </header>
  <div class="site-overlay" aria-hidden="true"></div>
