From 95ef874c7887adfb8ff30a7ab7215a3b60cb435a Mon Sep 17 00:00:00 2001
From: Trainmaster2 <dphammock@gmail.com>
Date: Sat, 19 Sep 2026 14:26:35 -0700
Subject: [PATCH 1/2] Ensure leading slash in HTML

---
 .github/workflows/test.yml | 5 +++--
 scripts/index/80-index.sh  | 1 +
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index bc3a1dd..e9f2c13 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -73,7 +73,7 @@ jobs:
           echo "$html" | grep -q '<title>Loading...</title>'
           echo "$html" | grep -qE '<video id="video"[^>]*\bautoplay\b'
           echo "$html" | grep -qE '<video id="video"[^>]*\bmuted\b'
-          echo "$html" | grep -q 'source src="video.mp4"'
+          echo "$html" | grep -q 'source src="/video.mp4"'
           echo "$html" | grep -q 'id="cookie-banner"'
           echo "$html" | grep -q 'id="site-error"'
           echo "$html" | grep -q 'id="loading-screen"'
@@ -91,6 +91,7 @@ jobs:
           [ "$status" = "404" ]
           html=$(curl -sS http://localhost:8080/some/random/path)
           echo "$html" | grep -q 'id="video"'
+          echo "$html" | grep -q 'source src="/video.mp4"'
 
       - name: Check container runs as non-root
         run: |
@@ -161,7 +162,7 @@ jobs:
           echo "$html" | grep -q 'height: 50vh'
           echo "$html" | grep -q 'width: 50%'
           echo "$html" | grep -q 'object-fit: contain'
-          echo "$html" | grep -q 'source src="custom.mp4"'
+          echo "$html" | grep -q 'source src="/custom.mp4"'
           if echo "$html" | grep -qE '<video id="video"[^>]*\bloop\b'; then
             echo "unexpected loop attribute present with LOOP=false"
             exit 1
diff --git a/scripts/index/80-index.sh b/scripts/index/80-index.sh
index 45a02ed..095904f 100644
--- a/scripts/index/80-index.sh
+++ b/scripts/index/80-index.sh
@@ -10,6 +10,7 @@ WIDTH="${WIDTH:-"100%"}"
 OBJECT_FIT="${OBJECT_FIT:-"cover"}"
 LOOP="${LOOP:-"true"}"
 VIDEO_FILE="${VIDEO_FILE:-"video.mp4"}"
+VIDEO_FILE="/${VIDEO_FILE#/}"
 OVERLAY="${OVERLAY:-"random"}"
 
 LOOP_ATTR=""

From 2f6adfcd31b801f8daf582193176b5ac01b20f15 Mon Sep 17 00:00:00 2001
From: Trainmaster2 <dphammock@gmail.com>
Date: Sat, 19 Sep 2026 14:26:45 -0700
Subject: [PATCH 2/2] Sanitize leading slash in nginx

---
 scripts/70-nginx.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/scripts/70-nginx.sh b/scripts/70-nginx.sh
index fe26e07..fdd1edd 100755
--- a/scripts/70-nginx.sh
+++ b/scripts/70-nginx.sh
@@ -4,6 +4,7 @@ set -eu
 
 PORT="${PORT:-"8080"}"
 VIDEO_FILE="${VIDEO_FILE:-"video.mp4"}"
+VIDEO_FILE="${VIDEO_FILE#/}"
 
 # Create nginx conf with port variable
 tee /etc/nginx/nginx.conf << 'EOF' >/dev/null