@networkpro/web 1.12.7 → 1.12.9

package/CHANGELOG.md

@@ -22,7 +22,95 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
-## [1.12.7] - 2025-06-10
+## [1.12.9] - 2025-06-11
+
+### Added
+
+- Added `check-security-txt-expiry.yml` workflow to check `.well-known/security.txt` expiration and warn if close to expiring
+- Added `humans.txt` and `security.txt` to `.well-known/` directory
+- Added `src/lib/components/CodeBlock.svelte` component for improved inline formatting control
+- Updated sitemap.xml to include `.well-known/` routes and the `/pgp` route
+- Added link to OpenPGP results for `security@s.neteng.pro` on the `/pgp` route
+- Added support for copy-to-clipboard feedback on PGP fingerprint buttons
+- Added detached signature (`security.txt.asc`) for `.well-known/security.txt`, signed with the `security@s.neteng.pro` PGP key
+
+### Changed
+
+- Version bump to `v1.12.9` in `package.json`
+- Corrected the name of `dnt-policy.txt` from `dnt-policy-1.0.txt`
+- Updated `src/service-worker.js` to:
+  - Reflect correct `.well-known/dnt-policy.txt` reference
+  - Exclude `.well-known/security.txt.asc` from caching
+- Applied line breaks to comment header in `jsconfig.template.jsonc` to fix formatting
+- Minor revision to spreadsheet display and fingerprint formatting for improved mobile responsiveness
+- Revised `.github/SECURITY.md`:
+  - Removed note about “PGP section coming soon to the wiki” (now live)
+  - Clarified Proton Mail use for `s.neteng.pro` addresses, while preserving support guidance for others
+  - Streamlined vulnerability reporting section for clarity and correctness
+- Updated Content Security Policy (CSP) header to allow `clipboard-write` permission
+- Added Proton Mail usage note to `/pgp` route UI for `s.neteng.pro` domain only
+- Added equivalent Proton Mail usage comment to `.well-known/security.txt`
+- Upgraded dependencies:
+  - `@eslint/compat` `^1.2.9` → `^1.3.0`
+  - `eslint-plugin-jsdoc` `^50.7.1` → `^50.8.0`
+  - `postcss` `^8.5.4` → `^8.5.5`
+  - `posthog-js` `^1.250.1` → `^1.250.2`
+  - `svelte` `5.33.19` → `5.34.1`
+
+---
+
+## [1.12.8] - 2025-06-11
+
+### Added
+
+- Created `/pgp` route with `+page.svelte`, `+page.server.js`, and supporting structure.
+- Added `src/lib/pages/PGPContent.svelte` for rendering PGP key information.
+- Dynamic routing with `src/routes/pgp/[key]/+server.js` for serving `.asc` files with correct MIME type (`application/pgp-keys`).
+- Support for serving QR code images statically in `/pgp` and dynamically in `/about`.
+- Added WebP versions of QR code images in `static/pgp/` and `src/lib/img/qr/`.
+- Set up dynamic import for QR images in `/about` route via `src/lib/images.js`.
+- Enhanced accessibility styles for focus-visible states on links.
+- Improved copy-to-clipboard buttons for PGP fingerprints.
+- Defined `ContactAssets` typedef and expanded `pgpKeys` data structure for strict typing.
+- README updated with new section: `static/pgp/` Directory Structure.
+
+### Changed
+
+- Modified `/about` route to reference `/pgp` and use dynamic WebP images for PGP keys.
+- Adjusted `src/lib/meta.js` to include metadata for the `/pgp` route.
+- Canonical links in `static/bin/CC-BY-4.0.html` and `static/bin/COPYING.html` updated to reflect new paths.
+- Service worker updated to exclude `.asc` files in `/pgp`, while continuing to cache QR image assets.
+- Moved license and binary files from `static/assets` to `static/bin`.
+- File paths updated on the `/license` route to reflect the new `/bin/license` location.
+- Updated sitemap.xml.
+- Updated `.prettierignore` to ignore `static/bin/license`.
+- Updated LinkSheet download in `FossItemContent.svelte` to reference `bin/linksheet.json`.
+- Added dynamic `lsheetDl` constant in `fossData.js`.
+- Updated `TermsConditionsContent.svelte` to point to `bin/consulting-terms.pdf`.
+- Updated `LicenseContent.svelte` to:
+  - View HTML license file.
+  - Use `download` attribute for all other formats.
+- Updated `generator` meta tag to reflect `SvelteKit 2.21.4`
+- Upgraded dependencies:
+  - `@playwright/test` updated from `^1.52.0` → `^1.53.0`
+  - `@sveltejs/kit` updated from `2.21.3` → `2.21.4`
+  - `eslint-plugin-svelte` updated from `^3.9.1` → `^3.9.2`
+  - `playwright` updated from `^1.52.0` → `^1.53.0`
+  - `posthog-js` updated from `^1.249.5` → `^1.250.1`
+  - `svelte` updated from `5.33.18` → `5.33.19`
+
+### Fixed
+
+- Resolved TypeScript and JSDoc typing errors in `AboutContent.svelte` and `PGPContent.svelte`.
+- Verified fallback behavior on `/pgp/[key]` for unknown files:
+  - `.asc` files return "File not found".
+  - All others fall through to 404.
+- Adjusted `function copy(text)` with explicit JSDoc type for parameter.
+- Removed stale references to deleted assets in service worker config.
+
+---
+
+## [1.12.7] - 2025-06-09
 
 ### Changed
 
@@ -198,7 +286,9 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.12.7...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.12.9...HEAD
+[1.12.9]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.9
+[1.12.8]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.8
 [1.12.7]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.7
 [1.12.6]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.6
 [1.12.5]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.12.5

package/README.md

@@ -105,6 +105,33 @@ This project follows the principles of [Keep a Changelog](https://keepachangelog
 
  
 
+### 🔐 `static/pgp/` Directory Structure
+
+This directory contains public PGP key files and their corresponding QR codes.
+
+```bash
+static/
+├── pgp/
+│   ├── contact@s.neteng.pro.asc       # Public key for secure email
+│   ├── pgp-contact.png                # QR code (PNG) for secure email key
+│   ├── pgp-contact.webp               # Optimized WebP version of the QR code
+│   ├── pgp-security.png               # QR code (PNG) for security contact key
+│   ├── pgp-security.webp              # WebP version of the security QR code
+│   ├── pgp-support.png                # QR code (PNG) for support key
+│   ├── pgp-support.webp               # WebP version of the support QR code
+│   ├── security@s.neteng.pro.asc      # Public key for security contact
+│   ├── support@neteng.pro.asc         # Public key for general support
+└── ...
+```
+
+- `.asc` files are **excluded from service worker precaching** but served directly via the `/pgp/[key]` route.
+- QR code images are **served statically** by the `/pgp` route using `<picture>` elements.
+- **WebP versions** are also used in the `/pgp` route, while the `/about` route imports **dynamic equivalents** from `src/lib/img/qr`.
+- This route does **not use fallback rendering**; only explicitly defined files are available and expected to resolve.
+- A dynamic `[key]/+server.js` handler under `src/routes/pgp/` serves the `.asc` files with appropriate `Content-Type` and download headers.
+
+&nbsp;
+
 ### E2E Test Structure
 
 End-to-end tests are located in `tests/e2e/` and organized by feature or route:

package/cspell.json

@@ -13,6 +13,7 @@
     "ccby",
     "CCPA",
     "CPRA",
+    "elif",
     "Embedder",
     "Ente",
     "esbuild",
@@ -33,6 +34,7 @@
     "lighthouserc",
     "lightningcss",
     "linksheet",
+    "lsheet",
     "Mailvelope",
     "Maricopa",
     "mdsvex",
@@ -51,7 +53,9 @@
     "NWPRO",
     "obtainium",
     "openpgp",
+    "opgp",
     "posthog",
+    "precaching",
     "prefs",
     "publickey",
     "reconsent",

package/jsconfig.template.jsonc

@@ -1,7 +1,9 @@
 /* =========================================================================
 jsconfig.template.jsonc
 
-NOTE: This file is for reference only and is not actively used by SvelteKit or tooling. SvelteKit uses the jsconfig.json file without comments for actual configuration.
+NOTE: This file is for reference only and is not actively used by SvelteKit or
+tooling. SvelteKit uses the jsconfig.json file without comments for actual
+configuration.
 
 Copyright © 2025 Network Pro Strategies (Network Pro™)
 SPDX-License-Identifier: CC-BY-4.0 OR GPL-3.0-or-later

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.12.7",
+  "version": "1.12.9",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",
@@ -80,17 +80,17 @@
   },
   "dependencies": {
     "dompurify": "^3.2.6",
-    "posthog-js": "^1.249.5",
+    "posthog-js": "^1.250.2",
     "semver": "^7.7.2",
-    "svelte": "5.33.18"
+    "svelte": "5.34.1"
   },
   "devDependencies": {
-    "@eslint/compat": "^1.2.9",
+    "@eslint/compat": "^1.3.0",
     "@eslint/js": "^9.28.0",
     "@lhci/cli": "^0.15.0",
-    "@playwright/test": "^1.52.0",
+    "@playwright/test": "^1.53.0",
     "@sveltejs/adapter-netlify": "^5.0.2",
-    "@sveltejs/kit": "2.21.3",
+    "@sveltejs/kit": "2.21.4",
     "@sveltejs/vite-plugin-svelte": "5.1.0",
     "@testing-library/jest-dom": "^6.6.3",
     "@testing-library/svelte": "^5.2.8",
@@ -99,16 +99,16 @@
     "browserslist": "^4.25.0",
     "eslint": "^9.28.0",
     "eslint-config-prettier": "^10.1.5",
-    "eslint-plugin-jsdoc": "^50.7.1",
-    "eslint-plugin-svelte": "^3.9.1",
+    "eslint-plugin-jsdoc": "^50.8.0",
+    "eslint-plugin-svelte": "^3.9.2",
     "globals": "^16.2.0",
     "jsdom": "^26.1.0",
     "lightningcss": "^1.30.1",
     "markdownlint": "^0.38.0",
     "markdownlint-cli2": "^0.18.1",
     "mdsvex": "^0.12.6",
-    "playwright": "^1.52.0",
-    "postcss": "^8.5.4",
+    "playwright": "^1.53.0",
+    "postcss": "^8.5.5",
     "prettier": "^3.5.3",
     "prettier-plugin-svelte": "^3.4.0",
     "stylelint": "^16.20.0",

package/src/app.html

@@ -72,7 +72,7 @@
       content="bx4ham0zkpvzztzu213bhpt76m9siq" />
     <!-- cspell:enable -->
 
-    <meta name="generator" content="SvelteKit 2.21.3" />
+    <meta name="generator" content="SvelteKit 2.21.4" />
 
     <script src="/disableSw.js"></script>
 

package/src/hooks.server.js

@@ -67,7 +67,7 @@ export async function handle({ event, resolve }) {
       "microphone=()",
       "geolocation=()",
       "clipboard-read=()",
-      "clipboard-write=()",
+      "clipboard-write=(self)",
       "payment=()",
       "usb=()",
       "hid=()",

package/src/lib/components/CodeBlock.svelte

@@ -0,0 +1,13 @@
+<!-- ==========================================================================
+src/lib/components/CodeBlock.svelte
+
+Copyright © 2025 Network Pro Strategies (Network Pro™)
+SPDX-License-Identifier: CC-BY-4.0 OR GPL-3.0-or-later
+This file is part of Network Pro.
+========================================================================== -->
+
+<script>
+  export let text = "";
+</script>
+
+<code class="block">{text}</code>

package/src/lib/components/foss/FossItemContent.svelte

@@ -126,11 +126,11 @@ This file is part of Network Pro.
             ><i class="fas fa-file-arrow-down" style="margin-left: 8px;"></i
             ></span>
           <a
-            href="/assets/bin/linksheet.json"
+            href="/bin/linksheet.json"
             type="application/json"
             download
             style="margin-left: 8px;"
-            target="_blank">
+            target={PAGE.BLANK}>
             Obtainium App Config
           </a>
         </p>

package/src/lib/data/fossData.js

@@ -7,8 +7,15 @@ This file is part of Network Pro.
 ========================================================================== */
 
 // Import FOSS images
+import { base } from "$app/paths";
 import { acodePng, acodeWbp, eauthPng, eauthWbp, hboardPng, hboardWbp, lsheetPng, lsheetWbp, pmxPng, pmxWbp, squirclePng, squircleWbp, tosPng, tosWbp, urlPng, urlWbp } from "$lib";
 
+/**
+ * URL to the LinkSheet config file, using the base path
+ * @type {string}
+ */
+const lsheetDl = `${base}/bin/linksheet.json`;
+
 export const fossData = [
   {
     id: "squircle",
@@ -510,7 +517,7 @@ export const fossData = [
         hideLabels: true,  // Special flag to control rendering
         downloadText: "Obtainium App Config",
         downloadHref:
-          "https://raw.githubusercontent.com/netwk-pro/dev-sveltekit/refs/heads/master/assets/bin/linksheet.json",
+          {lsheetDl},
       },
       {
         label: "GitHub",

package/src/lib/images.js

@@ -15,7 +15,7 @@ This file is part of Network Pro.
  * @description Provides convenient access to images in the src/lib/img directory
  * @module src/lib
  * @author SunDevil311
- * @updated 2025-05-30
+ * @updated 2025-06-09
  */
 
 // Import favicon images
@@ -55,9 +55,14 @@ import urlPng from "$lib/img/posts/urlcheck.png";
 import urlWbp from "$lib/img/posts/urlcheck.webp";
 
 // Import QR code images
-import pgpContact from "$lib/img/qr/pgp-contact.png";
-import pgpSupport from "$lib/img/qr/pgp-support.png";
-import vcfSrc from "$lib/img/qr/vcard.png";
+import pgpContactPng from "$lib/img/qr/pgp-contact.png";
+import pgpContactWbp from "$lib/img/qr/pgp-contact.webp";
+import pgpSecurityPng from "$lib/img/qr/pgp-security.png";
+import pgpSecurityWbp from "$lib/img/qr/pgp-security.webp";
+import pgpSupportPng from "$lib/img/qr/pgp-support.png";
+import pgpSupportWbp from "$lib/img/qr/pgp-support.webp";
+import vcfPng from "$lib/img/qr/vcard.png";
+import vcfWbp from "$lib/img/qr/vcard.webp";
 
 // Re-export all imports
 export {
@@ -79,9 +84,10 @@ export {
   lsheetWbp,
   obtainiumPng,
   obtainiumWbp,
-  pgpContact,
-  pgpSupport,
-  pmxPng,
+  pgpContactPng,
+  pgpContactWbp, pgpSecurityPng,
+  pgpSecurityWbp, pgpSupportPng,
+  pgpSupportWbp, pmxPng,
   pmxWbp,
   squirclePng,
   squircleWbp,
@@ -89,7 +95,8 @@ export {
   tosWbp,
   urlPng,
   urlWbp,
-  vcfSrc
+  vcfPng,
+  vcfWbp
 };
 
 // cspell:ignore eauth hboard

package/src/lib/meta.js

@@ -56,6 +56,11 @@ const meta = {
     description:
       "Privacy Dashboard | Security, Networking, Privacy — Network Pro™",
   },
+  "/pgp": {
+    title: "Public PGP Keys — Network Pro™",
+    description:
+      "Public encryption keys for secure communication | Security, Networking, Privacy — Network Pro™",
+  },
   // Excludes redirect-only routes like /contact, /consultation, /privacy-rights
 };
 

package/src/lib/pages/AboutContent.svelte

@@ -7,14 +7,21 @@ This file is part of Network Pro.
 ========================================================================== -->
 
 <script>
-  import { pgpContact, pgpSupport, vcfSrc } from "$lib";
+  import {
+    pgpContactPng,
+    pgpContactWbp,
+    pgpSupportPng,
+    pgpSupportWbp,
+    vcfPng,
+    vcfWbp,
+  } from "$lib";
   import { base } from "$app/paths";
   import { CONSTANTS } from "$lib";
 
   // Log the base path to verify its value
   //console.log("Base path:", base);
 
-  console.log(CONSTANTS.COMPANY_INFO.APP_NAME);
+  //console.log(CONSTANTS.COMPANY_INFO.APP_NAME);
 
   const { COMPANY_INFO, PAGE } = CONSTANTS;
 
@@ -24,6 +31,12 @@ This file is part of Network Pro.
    */
   const contactLink = `${base}/contact`;
 
+  /**
+   * URL to the PGP route, using the base path
+   * @type {string}
+   */
+  const pgpLink = `${base}/pgp`;
+
   /**
    * HTML attribute for async image decoding
    * @type {"async" | "sync" | "auto"}
@@ -70,6 +83,7 @@ This file is part of Network Pro.
    * @type {Array<{
    *   label: string,
    *   qrSrc: string,
+   *   qrWbp: string,
    *   keySearch: string,
    *   fingerprint: string[]
    * }>}
@@ -77,13 +91,15 @@ This file is part of Network Pro.
   const pgpKeys = [
     {
       label: "support@neteng.pro",
-      qrSrc: pgpSupport,
+      qrSrc: pgpSupportPng,
+      qrWbp: pgpSupportWbp,
       keySearch: "https://keys.openpgp.org/search?q=support%40neteng.pro",
       fingerprint: ["6590B992E2E3EFF12738", "7BCE2AF093E9DEC61BA0"],
     },
     {
       label: "contact@s.neteng.pro",
-      qrSrc: pgpContact,
+      qrSrc: pgpContactPng,
+      qrWbp: pgpContactWbp,
       keySearch: "https://keys.openpgp.org/search?q=contact%40s.neteng.pro",
       fingerprint: ["DF118BAA6C2D9DCDEBDC", "2DDCF99373499495F957"],
     },
@@ -91,18 +107,20 @@ This file is part of Network Pro.
 
   /**
    * @typedef {Object} ContactAssets
-   * @property {string} vcf - Path to the contact vCard (.vcf file)
-   * @property {string} qrSrc - Path to QR image for contact info
-   * @property {string} supportAsc - Support PGP public key file (.asc)
-   * @property {string} contactAsc - Contact PGP public key file (.asc)
+   * @property {string} vcf
+   * @property {string} qrSrc
+   * @property {string} qrWbp
+   * @property {string} supportAsc
+   * @property {string} contactAsc
    */
 
   /** @type {ContactAssets} */
   const contactAssets = {
-    vcf: "/assets/bin/contact.vcf",
-    qrSrc: vcfSrc,
-    supportAsc: "/assets/bin/support@neteng.pro.asc",
-    contactAsc: "/assets/bin/contact@s.neteng.pro.asc",
+    vcf: "/bin/contact.vcf",
+    qrSrc: vcfPng,
+    qrWbp: vcfWbp,
+    supportAsc: "/pgp/support@neteng.pro.asc",
+    contactAsc: "/pgp/contact@s.neteng.pro.asc",
   };
 </script>
 
@@ -210,8 +228,11 @@ This file is part of Network Pro.
 <div class="spacer"></div>
 
 <p>
-  You can find our PGP keys and a vCard containing our contact information
-  below.
+  You can find our PGP keys and a downloadable vCard with contact information
+  below. For a complete list of public keys, visit the <a
+    href={pgpLink}
+    target={PAGE.SELF}>dedicated PGP page</a
+  >.
 </p>
 
 <!-- BEGIN PGP KEYS -->
@@ -221,12 +242,15 @@ This file is part of Network Pro.
       <!-- Row 0 (First row) remains unchanged -->
       <tr>
         <td class="pgp-col1">
-          <img
-            {decoding}
-            {loading}
-            src={pgpKeys[0].qrSrc}
-            class="pgp-image"
-            alt={`PGP Key - ${pgpKeys[0].label}`} />
+          <picture>
+            <source srcset={pgpKeys[0].qrWbp} type="image/webp" />
+            <img
+              {decoding}
+              {loading}
+              src={pgpKeys[0].qrSrc}
+              class="pgp-image"
+              alt={`PGP Key - ${pgpKeys[0].label}`} />
+          </picture>
         </td>
         <td class="pgp-col2">
           <a rel={PAGE.REL} href={pgpKeys[0].keySearch} target={PAGE.BLANK}>
@@ -275,24 +299,30 @@ This file is part of Network Pro.
           </p>
         </td>
         <td class="pgp-col2">
-          <img
-            {decoding}
-            {loading}
-            src={pgpKeys[1].qrSrc}
-            class="pgp-image"
-            alt={`PGP Key - ${pgpKeys[1].label}`} />
+          <picture>
+            <source srcset={pgpKeys[1].qrWbp} type="image/webp" />
+            <img
+              {decoding}
+              {loading}
+              src={pgpKeys[1].qrSrc}
+              class="pgp-image"
+              alt={`PGP Key - ${pgpKeys[1].label}`} />
+          </picture>
         </td>
       </tr>
 
       <!-- Row 2 (Third row) remains unchanged -->
       <tr>
         <td class="pgp-col1">
-          <img
-            {decoding}
-            {loading}
-            src={contactAssets.qrSrc}
-            class="pgp-image"
-            alt="vCard" />
+          <picture>
+            <source srcset={contactAssets.qrWbp} type="image/webp" />
+            <img
+              {decoding}
+              {loading}
+              src={contactAssets.qrSrc}
+              class="pgp-image"
+              alt="vCard" />
+          </picture>
         </td>
         <td class="pgp-col2">
           <strong>vCard</strong>

package/src/lib/pages/LicenseContent.svelte

@@ -218,22 +218,19 @@ This file is part of Network Pro.
       </ul>
     {:else if link.id === "cc-by"}
       <p class={constants.classSmall}>
-        Download:
-        <a href="/assets/license/CC-BY-4.0.html" download target={PAGE.BLANK}
-          >HTML</a>
+        View / Download:
+        <a href="/bin/license/CC-BY-4.0.html" target={PAGE.BLANK}>HTML</a>
         |
-        <a href="/assets/license/CC-BY-4.0.md" download target={PAGE.BLANK}
+        <a href="/bin/license/CC-BY-4.0.md" download target={PAGE.BLANK}
           >Markdown</a>
         |
-        <a href="/assets/license/CC-BY-4.0.txt" download target={PAGE.BLANK}
+        <a href="/bin/license/CC-BY-4.0.txt" download target={PAGE.BLANK}
           >Text</a>
         |
-        <a
-          href="/assets/license/CC-BY-4.0-rdfa.xml"
-          download
-          target={PAGE.BLANK}>RDFa</a>
+        <a href="/bin/license/CC-BY-4.0-rdfa.xml" download target={PAGE.BLANK}
+          >RDFa</a>
         |
-        <a href="/assets/license/CC-BY-4.0.xml" download target={PAGE.BLANK}
+        <a href="/bin/license/CC-BY-4.0.xml" download target={PAGE.BLANK}
           >XMP</a>
       </p>
 
@@ -314,21 +311,18 @@ This file is part of Network Pro.
       </code>
     {:else if link.id === "gnu-gpl"}
       <p class={constants.classSmall}>
-        Download:
-        <a href="/assets/license/COPYING.html" download target={PAGE.BLANK}
-          >HTML</a>
+        View / Download:
+        <a href="/bin/license/COPYING.html" target={PAGE.BLANK}>HTML</a>
         |
-        <a href="/assets/license/COPYING.md" download target={PAGE.BLANK}
+        <a href="/bin/license/COPYING.md" download target={PAGE.BLANK}
           >Markdown</a>
         |
-        <a href="/assets/license/COPYING.txt" download target={PAGE.BLANK}
-          >Text</a>
+        <a href="/bin/license/COPYING.txt" download target={PAGE.BLANK}>Text</a>
         |
-        <a href="/assets/license/COPYING-rdfa.xml" download target={PAGE.BLANK}
+        <a href="/bin/license/COPYING-rdfa.xml" download target={PAGE.BLANK}
           >RDFa</a>
         |
-        <a href="/assets/license/COPYING.odt" download target={PAGE.BLANK}
-          >ODT</a>
+        <a href="/bin/license/COPYING.odt" download target={PAGE.BLANK}>ODT</a>
       </p>
 
       <p>