<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta name="viewport"
    content="width=device-width, initial-scale=1.0, viewport-fit=cover, user-scalable=no, maximum-scale=1.0">
  <title>Z Meadows - Mystical Botanical Sanctuary</title>
  <meta name="description" content="Your magical guide to herbal remedies and ancient botanical wisdom, powered by AI">
  <meta name="author" content="Z Meadows">

  <!-- iOS Specific Meta Tags -->
  <meta name="mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
  <meta name="apple-mobile-web-app-title" content="Z Meadows">
  <meta name="format-detection" content="telephone=no">
  <meta name="theme-color" content="#1e1b4b">

  <!-- Favicon -->
  <link rel="icon" type="image/x-icon" href="/favicon.ico">
  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16.png">
  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
  <link rel="icon" type="image/png" sizes="192x192" href="/android-chrome-192x192.png">
  <link rel="manifest" href="/manifest.json">

  <!-- Google Fonts -->
  <link rel="preconnect" href="https://fonts.googleapis.com">
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link
    href="https://fonts.googleapis.com/css2?family=Playfair+Display:wght@400;700;900&family=Montserrat:wght@300;400;500;600;700&family=Cinzel:wght@400;600&family=IM+Fell+English:ital@0;1&display=swap"
    rel="stylesheet">
  <!-- ⛔ Disable text selection and image dragging -->
  <style>
    html,
    body {
      -webkit-user-select: none;
      /* Safari/Chrome */
      -moz-user-select: none;
      /* Firefox */
      /* IE/Edge */
      user-select: none;
      /* Standard */
      -webkit-touch-callout: none;
      /* iOS Safari */
    }

    img {
      -webkit-user-drag: none;
      /* Chrome/Safari */

    }
  </style>
  <!-- Updated CSP to allow Stripe and external resources -->

  <!-- CSP will be handled via HTTP headers in edge functions for better iframe support -->
  <!-- Enhanced Security Headers -->
  <meta http-equiv="X-Content-Type-Options" content="nosniff">
  <meta http-equiv="X-XSS-Protection" content="1; mode=block">
  <meta http-equiv="Referrer-Policy" content="unsafe-url">
  <meta http-equiv="Permissions-Policy"
    content="camera=(), microphone=(self), geolocation=(), interest-cohort=(), payment=()">
  <meta http-equiv="Strict-Transport-Security" content="max-age=31536000; includeSubDomains; preload">
  <!-- AdSense removed to eliminate script loading errors -->
  <meta property="og:title" content="Z Meadows - Mystical Botanical Sanctuary">
  <meta property="og:description"
    content="Consult the Magic Mirror and explore ancient herbal knowledge in our mystical digital sanctuary">
  <meta property="og:type" content="website">
  <meta property="og:image" content="/android-chrome-192x192.png">
  <meta name="twitter:card" content="summary_large_image">
  <meta name="twitter:title" content="Z Meadows">
  <meta name="twitter:description" content="Your mystical guide to herbal remedies and ancient botanical wisdom">
  <meta name="twitter:image" content="/android-chrome-192x192.png">
  <script type="module" crossorigin src="/assets/index-NnchIdsc.js"></script>
  <link rel="modulepreload" crossorigin href="/assets/react-vendor-CLQ_djOU.js">
  <link rel="modulepreload" crossorigin href="/assets/supabase-BQMUZa9a.js">
  <link rel="modulepreload" crossorigin href="/assets/ui-vendor-DD90yWk8.js">
  <link rel="modulepreload" crossorigin href="/assets/utils-BQy-2_Uf.js">
  <link rel="stylesheet" crossorigin href="/assets/index-Cx5iPAum.css">
</head>

<body>
  <!-- ⛔ Enhanced security: Disable right-click and common copy/inspect keys -->
  <!-- TEMPORARILY DISABLED FOR DEBUGGING -->
  <!--<br>
  <script>
    // Block right-click context menu
    document.addEventListener('contextmenu', function(e) {
      e.preventDefault();
    });
    // Block Ctrl+C, Ctrl+U, Ctrl+S, Ctrl+P, Ctrl+A, Ctrl+X, F12, Ctrl+Shift+I/J
    document.addEventListener('keydown', function(e) {
      if (e.ctrlKey) {
        const forbidden = ['c', 'x', 's', 'u', 'p', 'a'];
        if (forbidden.includes(e.key.toLowerCase())) {
          e.preventDefault();
        }
      }
      if (
        e.key === 'F12' ||
        (e.ctrlKey && e.shiftKey && ['i', 'j'].includes(e.key.toLowerCase()))
      ) {
        e.preventDefault();
      }
    });
    // Enhanced security monitoring
    window.addEventListener('load', function() {
      // Log page load event
      if (window.location.protocol !== 'https:' && window.location.hostname !== 'localhost') {
        console.warn('🔒 Security Warning: Page not loaded over HTTPS');
      }
      
      // Check for secure context
      if (!window.isSecureContext) {
        console.warn('🔒 Security Warning: Not running in secure context');
      }
    });
    // Monitor for suspicious activity
    let suspiciousActivity = 0;
    document.addEventListener('keydown', function(e) {
      // Track suspicious key combinations
      if (e.ctrlKey && e.shiftKey && ['c', 'i', 'j'].includes(e.key.toLowerCase())) {
        suspiciousActivity++;
        if (suspiciousActivity > 3) {
          console.warn('🔒 Multiple attempts to access developer tools detected');
        }
      }
    });
  </script>
  -->
  <div id="root"></div>
</body>

</html>