@@ -20,6 +20,10 @@ if err != nil {
 		log.Fatal(err)
 	}
 
+	// for path := range []string{c.Dirs.Static, c.Repo.ScanPath, c.Dirs.Templates} {
+	// 	Unveil(path, "r")
+	// }
+
 	mux := routes.Handlers(c)
 	addr := fmt.Sprintf("%s:%d", c.Server.Host, c.Server.Port)
 	log.Println("starting server on", addr)

@@ -210,6 +210,11 @@ }
 
 .line-numbers {
   white-space: pre-line;
+  -moz-user-select: -moz-none;
+  -khtml-user-select: none;
+  -webkit-user-select: none;
+  -o-user-select: none;
+  user-select: none;
 }
 
 .file-wrapper {

@@ -0,0 +1,28 @@
+//go:build openbsd
+// +build openbsd
+
+package main
+
+/*
+#include <stdlib.h>
+#include <unistd.h>
+*/
+import "C"
+
+import (
+	"fmt"
+	"unsafe"
+)
+
+func Unveil(path string, perms string) error {
+	cpath := C.CString(path)
+	defer C.free(unsafe.Pointer(cpath))
+	cperms := C.CString(perms)
+	defer C.free(unsafe.Pointer(cperms))
+
+	rv, err := C.unveil(cpath, cperms)
+	if rv != 0 {
+		return fmt.Errorf("unveil(%s, %s) failure (%d)", path, perms, err)
+	}
+	return nil
+}