display a loading message when loading

closes #5

server/public/index.html

@@ -72,6 +72,7 @@
                 display();
 
                 function display() {
+                    main.html(`<div class="center-message"><p>Loading...</p></div>`);
                     let id = getId();
                     $.ajax({
                         method: "get",
@@ -86,7 +87,7 @@
                                     $(window).scrollTop(element.offset().top);
                             });
                         },
-                        error: (r, s, e) => main.html(`<div class="error"><p>Error loading shared note with id <code>${id}</code>: ${e}</p><p><a href="#">Home</a></p></div>`)
+                        error: (r, s, e) => main.html(`<div class="center-message"><p>Error loading shared note with id <code>${id}</code>: ${e}</p><p><a href="#">Home</a></p></div>`)
                     });
                 }
 

server/public/index.md

@@ -21,6 +21,8 @@ There are two ways to manage shared notes: you can open the context menu on a sh
 Both allow a set of actions, including sharing the link, updating the share and deleting the share. When updating the share, the link will stay intact, but it will be updated with the note's new content.
 
 ## How it Works (and Security)
+**To report a security vulnerability, please use GitHub's [private vulnerability reporting](https://github.com/Ellpeck/ObsidianJustSharePlease/security) feature or email [me@ellpeck.de](mailto:me@ellpeck.de).**
+
 Just Share Please uses a simple [PHP backend](https://github.com/Ellpeck/ObsidianJustSharePlease/blob/main/server/public/share.php) that accepts requests for sharing, updating and deleting notes.
 
 When sharing a note, its content as well as additional metadata created by the backend is stored in the server's `data` directory. Note content is stored **in plain text**, which means server admins are able to observe all notes and their content and potentially edit them. However, for users of Just Share Please to update or delete a shared note, they have to have access to a **password** that is automatically generated by the backend when sharing a note. You don't have to remember this password yourself, as it is automatically saved in the plugin's settings file. This also means that **deleting your settings** causes you to **lose access to all your shares**.

server/public/style.css

@@ -57,7 +57,7 @@ h1:hover .header-anchor, h2:hover .header-anchor, h3:hover .header-anchor, h4:ho
     line-height: 1.5;
 }
 
-.error {
+.center-message {
     position: absolute;
     text-align: center;
     left: 50%;