root/public: links for resist-hotlinking