Move prf zeroing logic inside `finally`

This approach is more semantically aligned with what is meant to happen (wipe `prf` after it is broadcast, regardless of success or fail), and potentially better scheduling (previous approach allowed theoretical promises in the microtask queue injected after the `fetch` but before yielding to main thread?).

diff --git a/src/getPrf.html b/src/getPrf.html
index 9aac142bf1bad4779e0cca49e76f5a8249f0735c..2fba2ea8c4118a7653f5826ef3d974e0c00c1ef3 100644 (file)
--- a/src/getPrf.html
+++ b/src/getPrf.html
@@ -98,8 +98,9 @@
           'Envpass-Challenge': challenge
         },
         body: prf
+      }).finally(() => {
+        prf.fill(0);
       });
-      prf.fill(0);
       if (response.status === 200) {
         p.textContent = 'Successfully sent passkey. You may close this window now.';
         clearTimeout(timeoutId);