Upload index.html

static/index.html

@@ -209,8 +209,8 @@
     </div>
 
     <script>
-        // Global variables
-        let userApiKey = localStorage.getItem('hf_api_key') || '';
+        // Global variables - NO localStorage persistence for security
+        let userApiKey = '';
         let isApiKeyValid = false;
         
         // DOM elements
@@ -229,12 +229,13 @@
         const keyError = document.getElementById('keyError');
         const mainApp = document.getElementById('mainApp');
         
-        // Initialize on page load
+        // Initialize on page load - no pre-filling for security
         document.addEventListener('DOMContentLoaded', () => {
-            if (userApiKey) {
-                apiKeyInput.value = userApiKey;
-                validateApiKey(userApiKey);
-            }
+            // Always start with empty API key field
+            apiKeyInput.value = '';
+            userApiKey = '';
+            isApiKeyValid = false;
+            disableMainApp();
         });
         
         // API Key validation
@@ -272,7 +273,7 @@
                     console.log('✅ API key validated successfully');
                     showKeyStatus('valid');
                     userApiKey = apiKey;
-                    localStorage.setItem('hf_api_key', apiKey);
+                    // NO localStorage.setItem for security - key only stored in memory
                     isApiKeyValid = true;
                     enableMainApp();
                     return true;