Link /assets/favicon.ico from every page and serve /favicon.ico without requiring the access key (browsers request it on their own). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- 6-digit access key gate with long-lived HttpOnly cookie, brute-force limits - Lobby with saved player name and live table list - Table creation (name, starting stack, blinds, blind timer) - Table play screen stub (seats, button/SB/BB, phase, blinds, timer) - Security hardening: strict CSP, origin checks, host pinning, input sanitizing Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
agomizi1cmandClaude Opus 5.5