(function(){ // Never run inside the admin (the V2 builder would save anything this // script writes into the page HTML). if(location.pathname.indexOf("/admin") === 0) return; // Inject as EARLY as possible (as soon as the body element exists, well // before DOMContentLoaded/hydration) so hard navigations paint the header // with the first content instead of flashing it in later. function whenBody(f){ if(document.body){ f(); return; } var mo = new MutationObserver(function(){ if(document.body){ mo.disconnect(); f(); } }); mo.observe(document.documentElement, { childList: true }); } whenBody(function(){ // Categories come only from /api/categories (null until it arrives): the // injected header's Collections panel stays empty until then, and the home // page keeps its static links. Links are built with the DOM API, never // innerHTML, so store-entered names stay inert. Filled state is tracked in // per-load WeakSets, never as attributes, so nothing can leak into HTML // that gets saved. var LIVE = null; var done = new WeakSet(), mine = new WeakSet(); function clean(list){ var out = []; if(!list || !list.length) return out; for(var i = 0; i < list.length && out.length < 100; i++){ var c = list[i]; if(!c || typeof c.slug !== "string" || typeof c.name !== "string") continue; if(!/^[a-z0-9-]{1,80}$/.test(c.slug)) continue; var n = c.name.trim().slice(0, 80); if(!n) continue; out.push({ n: n, h: "/" + c.slug }); } return out; } function mkLink(c, dataName){ var a = document.createElement("a"); a.setAttribute("href", c.h); if(dataName) a.setAttribute("data-name", "Link"); a.textContent = c.n; mine.add(a); return a; } // Injected-header placeholder: its only children are category links. function fillCats(host){ if(!LIVE) return; while(host.firstChild) host.removeChild(host.firstChild); for(var i = 0; i < LIVE.length; i++){ host.appendChild(mkLink(LIVE[i], false)); } done.add(host); } // Home page header (V2 HTML): swap category links, keep the .all link. function fillPanel(panel){ var all = null, kids = panel.children; for(var i = kids.length - 1; i >= 0; i--){ var k = kids[i]; if(k.tagName !== "A") continue; if(k.classList.contains("all")){ all = k; continue; } panel.removeChild(k); } for(var j = 0; j < LIVE.length; j++){ panel.insertBefore(mkLink(LIVE[j], true), all); } done.add(panel); } function filled(el){ if(!done.has(el)) return false; for(var i = 0; i < el.children.length; i++){ if(mine.has(el.children[i])) return true; } return false; } // Returns true if anything was (re)filled. function applyLive(home){ if(!LIVE) return false; var hosts = document.querySelectorAll(home ? ".gwh-cats, .gw2-dd-panel, .gw2-mdd .gw2-sub" : ".gwh-cats"); var any = false; for(var i = 0; i < hosts.length; i++){ var h = hosts[i]; if(filled(h)) continue; if(h.classList.contains("gwh-cats")) fillCats(h); else fillPanel(h); any = true; } return any; } // The home header lives inside React's dangerouslySetInnerHTML, so it is // only touched after window load, then watched for (re)renders. The watch // ends 10s after the last fill (or after load) to not observe forever. // "loaded" = window load fired AND one idle turn passed, i.e. React has // hydrated. Nothing inside the React root (home V2 header, footer, /terms // headings) may be touched before that, or hydration fails with #418. var loaded = false, obs = null, stopT = 0, stopped = false; function armStop(){ clearTimeout(stopT); stopT = setTimeout(function(){ stopped = true; if(obs){ obs.disconnect(); obs = null; } }, 10000); } function startObs(){ if(obs || stopped || !LIVE || !loaded || !window.MutationObserver) return; obs = new MutationObserver(function(){ if(!obs) return; // Our own inserts register in the WeakSets, so this settles after one pass. obs.disconnect(); var any = false; try { any = applyLive(true); } finally { if(!stopped) obs.observe(document.body, { childList: true, subtree: true }); } if(any) armStop(); }); obs.observe(document.body, { childList: true, subtree: true }); armStop(); } function onReady(){ applyLive(false); if(loaded){ applyLive(true); startObs(); } } function afterHydration(){ var go = function(){ loaded = true; if(LIVE) onReady(); else armStop(); tick(); }; var idle = function(){ if(window.requestIdleCallback) requestIdleCallback(go, { timeout: 1500 }); else setTimeout(go, 200); }; if(document.readyState === "complete") idle(); else window.addEventListener("load", idle); } try { fetch("/api/categories", { credentials: "same-origin" }) .then(function(r){ return r.ok ? r.json() : null; }) .then(function(j){ var L = clean(j && j.categories); if(!L.length) return; LIVE = L; onReady(); }) .catch(function(){}); } catch(e) {} function mount(){ if(document.querySelector(".gwh") || document.querySelector(".gw2")) return; // Home ("/") renders its own .gw2 header, which may not be parsed yet: // an early .gwh there is a stray body child during hydration (#418). if(!loaded && location.pathname === "/") return; // Home renders its own header inside the page; skip when its root is // present (may appear later in the parse, so keep checking). document.body.insertBefore(build(), document.body.firstChild); updBadge(); } function build(){ var p = location.pathname; function act(h, pre){ return (p === h || (pre && p.indexOf(pre) === 0)) ? " class=\"active\"" : ""; } var el = document.createElement("div"); el.className = "gwh"; // NOTE: \x3C instead of literal "<" throughout — the customHeadTags // sanitizer scans the raw string for tags and would reject markup that // only exists inside these JS strings. el.innerHTML = '\x3Cdiv class="gwh-strip">\x3Cdiv class="w">\x3Cspan>Free Shipping over $50 AUD\x3C/span>\x3Cspan>Australian Owned & Operated\x3C/span>\x3C/div>\x3C/div>' + '\x3Cdiv class="gwh-head">\x3Cdiv class="w">' + '\x3Cdiv class="gwh-menu">\x3Cinput type="checkbox" id="gwh-mt" aria-label="Menu">\x3Clabel for="gwh-mt" class="gwh-burger">\x3Cspan>\x3C/span>\x3Cspan>\x3C/span>\x3Cspan>\x3C/span>\x3C/label>\x3Cdiv class="panel">\x3Ca href="/">Home\x3C/a>\x3Ca href="/categories">Shop\x3C/a>\x3Cdetails class="gwh-mdd">\x3Csummary>Collections\x3C/summary>\x3Cdiv class="gwh-sub">\x3Cspan class="gwh-cats">\x3C/span>\x3Ca class="all" href="/categories">View All Collections\x3C/a>\x3C/div>\x3C/details>\x3Ca href="/about">About Us\x3C/a>\x3C/div>\x3C/div>' + '\x3Cnav class="gwh-nav">\x3Ca href="/">Home\x3C/a>\x3Ca href="/categories"' + act("/categories","/categories") + '>Shop\x3C/a>' + '\x3Cdetails class="gwh-dd">\x3Csummary>Collections\x3C/summary>\x3Cdiv class="gwh-dd-panel">\x3Cspan class="gwh-cats">\x3C/span>\x3Ca class="all" href="/categories">View All Collections\x3C/a>\x3C/div>\x3C/details>' + '\x3Ca href="/about"' + act("/about","/about") + '>About Us\x3C/a>\x3C/nav>' + '\x3Ca class="gwh-logo" href="/">\x3Cimg class="im" src="https://gpyqzxsov66qjotk.public.blob.vercel-storage.com/stores/1950/logo-glora-world-IJKwfgeRPIynlmjVUEnPh9ujpmfiho.png" alt="Glora World">\x3Cdiv class="tg">crafted to shine, made to last\x3C/div>\x3C/a>' + '\x3Cdiv class="gwh-ic">' + '\x3Ca href="/search" aria-label="Search">\x3Csvg viewBox="0 0 24 24" fill="none" stroke-width="1.7">\x3Ccircle cx="11" cy="11" r="7">\x3C/circle>\x3Cpath d="m20 20-3.8-3.8">\x3C/path>\x3C/svg>\x3C/a>' + '\x3Ca href="/profile" aria-label="Account">\x3Csvg viewBox="0 0 24 24" fill="none" stroke-width="1.7">\x3Ccircle cx="12" cy="8" r="4">\x3C/circle>\x3Cpath d="M4 21c1.4-3.6 4.4-5.4 8-5.4s6.6 1.8 8 5.4">\x3C/path>\x3C/svg>\x3C/a>' + '\x3Ca href="/cart" aria-label="Cart">\x3Csvg viewBox="0 0 24 24" fill="none" stroke-width="1.7">\x3Cpath d="M6 7h12l-1.2 13H7.2L6 7z">\x3C/path>\x3Cpath d="M9 7a3 3 0 0 1 6 0">\x3C/path>\x3C/svg>\x3Cspan class="gwh-badge">0\x3C/span>\x3C/a>' + '\x3C/div>\x3C/div>\x3C/div>'; var slots = el.querySelectorAll(".gwh-cats"); for(var i = 0; i < slots.length; i++){ fillCats(slots[i]); } return el; } function updBadge(){ try { var badge = document.querySelector(".gwh-badge"); if(!badge) return; var items = JSON.parse(localStorage.getItem("store_cart") || "[]"); var n = 0; for(var i = 0; i < items.length; i++){ n += items[i].quantity || 1; } badge.textContent = String(n); } catch(e) {} } // ── Footer "Return Policy" → /terms#return (2026-09-16) ── // The platform minimal footer hardcodes its link row, and the terms page // sanitizer strips id attributes, so both the extra link and the anchor are // applied here at runtime. Re-applied from tick() because React can drop // body-level strangers during hydration. function injectFooter(){ var f = document.querySelector("footer"); if(!f || f.querySelector(".gwh-return")) return; var terms = f.querySelector('a[href="/terms"]'); if(!terms) return; var a = document.createElement("a"); a.className = (terms.className || "") + " gwh-return"; a.href = "/terms#return"; a.textContent = "Return Policy"; if(terms.getAttribute("style")) a.setAttribute("style", terms.getAttribute("style")); terms.parentNode.insertBefore(a, terms.nextSibling); } function fixReturnAnchor(){ if(location.pathname.indexOf("/terms") !== 0) return; var hs = document.querySelectorAll("h2"), el = null; for(var i = 0; i < hs.length; i++){ if(/returns/i.test(hs[i].textContent)){ el = hs[i]; break; } } if(!el) return; if(el.id !== "return") el.id = "return"; // The browser's own #hash jump runs before this content exists, so a // direct visit to /terms#return needs the scroll replayed once. if(location.hash === "#return" && !window.__gwhReturned){ window.__gwhReturned = 1; el.scrollIntoView({ block: "start" }); } } function closeDropdowns(e){ var open = document.querySelectorAll("details.gw2-dd[open],details.gwh-dd[open],details.gw2-mdd[open],details.gwh-mdd[open]"); for(var i = 0; i < open.length; i++){ if(!open[i].contains(e.target)) open[i].removeAttribute("open"); } } document.addEventListener("click", closeDropdowns, true); function tick(){ // Early injection can beat the home page's own .gw2 into the DOM — // if both exist, the injected copy yields to the page's version. var gwh = document.querySelector(".gwh"); if(gwh && document.querySelector(".gw2")){ gwh.parentNode.removeChild(gwh); } else mount(); // Footer and /terms headings are React-rendered: post-hydration only. if(loaded){ injectFooter(); fixReturnAnchor(); } } // Body-level sibling ABOVE the app root — injecting inside the React // tree breaks hydration (#418). React can still remove body-level // strangers while reconciling, so re-mount aggressively for the first // seconds (hydration window), then keep a slow heartbeat. tick(); afterHydration(); var fast = setInterval(tick, 250); setTimeout(function(){ clearInterval(fast); setInterval(tick, 1500); }, 6000); setInterval(updBadge, 3000); }); })();