Load challenge as style

examples/forgejo.yml

@@ -121,6 +121,10 @@ challenges:
       # verifies that result = key
       mode: "key"
       probability: 0.1
+    parameters:
+      key-code: 200
+      key-mime: text/css
+      key-content: ""
 
   # Challenges with a redirect via Refresh header (non-JS, requires HTTP parsing and logic)
   self-header-refresh:

lib/state.go

@@ -406,7 +406,7 @@ func NewState(p policy.Policy, settings StateSettings) (state *State, err error)
 
 				redirectUri.RawQuery = values.Encode()
 
-				w.Header().Set("Link", fmt.Sprintf("<%s>; rel=preload; as=fetch; crossorigin=1", redirectUri.String()))
+				w.Header().Set("Link", fmt.Sprintf("<%s>; rel=preload; as=style; fetchpriority=high", redirectUri.String()))
 				defer func() {
 					// remove old header header!
 					w.Header().Del("Link")