LVI browser-to-VLC test

Run this page from the same place a forum page would be served (https on the real site), not from a local file, or the result says nothing about the real case.

  1. A background request, no credentials (shows whether the browser may reach VLC at all).
  2. B background request with an Authorization header (needs VLC to answer CORS, expected to fail).
  3. C background image request with the password in the URL (browsers usually block this).
  4. D new browser tab with the password in the URL (a top-level navigation, the most likely to work).
  5. E download a .m3u file. F download a .xspf file (fallback, needs no VLC setup).
  6. G a vlc:// link (works only where a protocol handler is installed).

After each test look at VLC: did it start playing? The log can only say whether the request left the browser. Copy the log back to Claude.