v4.3.0-beta.9

Patch Changes

• Speed up stats pages and cards: the profile and embed load in parallel, card renders skip the username lookup and are capped under bursts, and banners and latest posts are shared across open pages instead of queried per visitor. 00a26eb @DarthGigi
• Make stats pages much lighter: the icon font drops from 2 MB to 69 KB, the enchanted glint is a 31 KB animated AVIF instead of a 730 KB GIF, and the 3D skin viewer, settings panes, theme editor and card builder load only when used. Signed-in requests no longer run extra database queries for the session, and card renders queue under load instead of failing. 941a56c @DarthGigi
• Harden the theme image proxy against requests to internal addresses, including via DNS and redirects, and cap image size while streaming. Load the card builder only when it is opened, and drop unpublished posts from the sitemap without a restart. 65bacc5 @DarthGigi
• Stop player and profile names from reaching other backend routes: invalid names on stats pages now return 404, and backend request paths are escaped so . and .. can no longer be normalized away. Client-side navigation between profiles no longer waits for the Discord embed data. a5e2966 @DarthGigi
• Preload the main Montserrat font so body text renders sooner, and cache in-site card previews for five minutes. 3fa9bd5 @DarthGigi

Full Changelog: v4.3.0-beta.8...v4.3.0-beta.9