<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
    <meta name="theme-color" content="#1e3a6e" />
    <title>CiteHR | The Professional Excellence Hub &amp; Intelligence Network</title>
    <meta name="description" content="Master industry nuances and navigate real-world professional scenarios with AI-Vigilance and Human Intelligence. Join India's elite professional network.">
    <meta name="robots" content="noai, noimageai" />
    <meta name="author" content="CiteHR" />

    <!-- Clickjacking protection: disallow embedding except by Lovable's editor preview iframe. -->
    <meta http-equiv="Content-Security-Policy" content="frame-ancestors 'self' https://*.lovable.app https://*.lovable.dev https://*.lovableproject.com https://*.gptengineer.app" />
    <script>
      // Frame-buster fallback for browsers/contexts where CSP frame-ancestors isn't honored.
      // Allow embedding by Lovable's editor preview; bust everything else.
      (function () {
        var ALLOWED = /(^|\.)lovable\.app$|(^|\.)lovable\.dev$|(^|\.)lovableproject\.com$|(^|\.)gptengineer\.app$/i;
        try {
          if (window.top === window.self) return;
          // Try to read top.location.hostname; throws on cross-origin (which is the normal case).
          var topHost = "";
          try { topHost = window.top.location.hostname; } catch (_) { topHost = ""; }
          if (topHost && ALLOWED.test(topHost)) return; // same-origin Lovable wrapper
          // Cross-origin parent: use document.referrer as a best-effort hint.
          var refHost = "";
          try { refHost = new URL(document.referrer).hostname; } catch (_) {}
          if (refHost && ALLOWED.test(refHost)) return; // framed by Lovable preview
          // Unknown framer → bust out.
          if (topHost) {
            window.top.location = window.self.location;
          } else {
            document.documentElement.style.display = "none";
            window.location = "about:blank";
          }
        } catch (e) { /* fail open */ }
      })();
    </script>

    <link rel="preconnect" href="https://wnegpptddirrvegbecwl.supabase.co" crossorigin />
    <link rel="dns-prefetch" href="https://wnegpptddirrvegbecwl.supabase.co" />

    <link rel="icon" type="image/x-icon" href="/favicon.ico" />
    <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" />
    <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" />
    <link rel="icon" type="image/png" sizes="96x96" href="/favicon-96x96.png" />
    <!-- Route-specific canonical/OG tags are injected server-side for crawlers and set client-side for SPA navigation. -->
    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@citecommunity" />
    <script type="module" crossorigin src="/assets/index-D2b9nRAG.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/tiptap-BXPCbzn4.js">
    <link rel="modulepreload" crossorigin href="/assets/react-core-kXILRT61.js">
    <link rel="modulepreload" crossorigin href="/assets/supabase-DyH-F53u.js">
    <link rel="modulepreload" crossorigin href="/assets/radix-b9wyYDyE.js">
    <link rel="modulepreload" crossorigin href="/assets/charts-CcnboYga.js">
    <link rel="modulepreload" crossorigin href="/assets/icons-D-vJs5DH.js">
    <link rel="modulepreload" crossorigin href="/assets/query-Bx3Z2sNw.js">
    <link rel="modulepreload" crossorigin href="/assets/router-ClEwbBE5.js">
    <link rel="modulepreload" crossorigin href="/assets/date-fns-B0ckLrDm.js">
    <link rel="stylesheet" crossorigin href="/assets/index-QpdzP4Pw.css">
  </head>

  <body>
    <script>
      (function(){
        var ua = navigator.userAgent;
        var p = location.pathname + location.search;


        // --- Early legacy URL redirect for ALL users ---
        // Detect legacy vBulletin/vBSEO patterns and redirect via edge function
        // BEFORE React loads, so there's no 404 flash or auth-gate delay.
        var isLegacy = false;
        if (/^\/\d+-.*\.html$/.test(location.pathname)) isLegacy = true;
        else if (/\/(showthread|showpost|viewtopic)\.php/.test(location.pathname)) isLegacy = true;
        else if (/^\/f\d+\/.*-\d+\.html$/.test(location.pathname)) isLegacy = true;
        else if (/\/tags\.php/.test(location.pathname)) isLegacy = true;
        else if (/\/member\.php/.test(location.pathname)) isLegacy = true;
        else if (/\/attachment\.php/.test(location.pathname)) isLegacy = true;

        if (isLegacy) {
          var url = 'https://wnegpptddirrvegbecwl.supabase.co/functions/v1/legacy-redirect?format=json&path=' +
            encodeURIComponent(p) + '&origin=' + encodeURIComponent(location.origin);
          fetch(url).then(function(res) { return res.json(); }).then(function(data) {
            if (data && data.redirect) {
              location.replace(data.redirect);
            }
          }).catch(function() {
            // Network error — SPA fallback will handle it
          });
        }

        // Static sitemap.xml is generated at build time and served directly by the host.
      })();
    </script>
    <div id="google_translate_element" style="display:none"></div>
    <div id="root"></div>
    <script>
      // Google Translate is lazy-loaded by LanguageTranslateDropdown on first
      // dropdown open. EXCEPTION: if the user already has a googtrans cookie,
      // load it eagerly so their saved language persists on page load.
      (function () {
        if (document.cookie.indexOf('googtrans=') !== -1) {
          window.googleTranslateElementInit = function () {
            new google.translate.TranslateElement(
              { pageLanguage: 'en', autoDisplay: false },
              'google_translate_element'
            );
          };
          var s = document.createElement('script');
          s.src = '//translate.google.com/translate_a/element.js?cb=googleTranslateElementInit';
          s.async = true;
          document.body.appendChild(s);
        }
      })();
    </script>
  </body>
</html>