A standalone password-gate page layout — not composed with <Base>, renders its own full <html>. Shows a password form; on submit, XORs the decoded encryptedData against a SHA-256 hash of the typed password entirely client-side (no server round-trip) and, if the result looks like real HTML, replaces the form with it in place. Wrong guesses are rate-limited to 5 attempts per page load.
| Type | Name | Description |
|---|---|---|
| Object | site? |
Site info; only site.language is read (sets <html lang>, default “en”). |
| string | encryptedData |
Base64-encoded, XOR-“encrypted” HTML payload to reveal on success. |