platphorm-layout

🛡️ Sentinel: [HIGH] Fix XSS vulnerability in ChartStyle component Replaced `<` with `\u003c` in dynamically generated CSS string injected via `dangerouslySetInnerHTML` in the `<style>` block in `components/ui/chart.tsx`. This mitigates a potential Cross-Site Scripting (XSS) vulnerability where an attacker could inject `</style><script>alert(1)</script>` if they had control over the chart configuration. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

🛡️ Sentinel: [HIGH] Fix XSS vulnerability in chart styles 🚨 Severity: HIGH 💡 Vulnerability: The `ChartStyle` component used `dangerouslySetInnerHTML` to inject dynamic CSS without escaping `<` characters. An attacker controlling chart keys or themes could inject `</style><script>alert('XSS')</script>`, closing the style block prematurely and executing arbitrary code. 🎯 Impact: This could lead to a Cross-Site Scripting (XSS) vulnerability, allowing attackers to execute JavaScript in the context of the user's session. 🔧 Fix: Appended `.replace(/</g, "\\u003c")` to the dynamically generated CSS string before it is rendered via `dangerouslySetInnerHTML`, neutralizing any injected HTML tags. ✅ Verification: Ran `pnpm test` and `pnpm build` to ensure no regressions were introduced. Evaluated that legitimate CSS does not use the `<` character, so no functionality is broken. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

🛡️ Sentinel: Apply security headers in middleware Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

feat: enhance discovery files, LLMs integration, and testing framework - Add ROADMAP.md for network scaling and deployment plans - Create dynamic endpoints for sitemap.xml, robots.txt, llms.txt, llms-full.txt, and llms-index.json - Add comprehensive MCP integration and API routes - Migrate custom testing scripts to Vitest and React Testing Library - Fix build and ensure test coverage for all discovery endpoints Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

Merge pull request #20 from mbarbine/jules-platphorm-network-integration-17414511420714130208 feat: integrate platphorm network and add navigation features

feat: integrate platphorm network and add navigation features - Added `/api/health` configuration and verification - Registered PlatPhorm network URLs in `site.ts` and `mcp.json` (`/api/network/graph`, `/api/docs`, `mcp.platphormnews.com`) - Created an accessible `FAQPage` using `radix-ui/react-accordion` - Implemented global `Breadcrumbs` component added to `[locale]/layout.tsx` - Verified visual components locally with Playwright - Verified Vercel build successfully passes without linting errors Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

feat: add tooltips to icon-only buttons in top navigation Wrap the Hamburger Menu and Locale Switcher icon buttons in Radix Tooltip components to improve accessibility and provide visual context for sighted mouse and keyboard users, resolving an issue with missing visual hints for icon-only actions. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

feat: add tooltip to theme toggle button and document finding Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

🎨 Palette: Add tooltips to TopBar icon-only buttons Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

feat(a11y): add aria-label to toast close button Added `aria-label="Close"` to the icon-only ToastClose button to improve screen reader accessibility. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

feat: add isLoading prop to Button component Adds an `isLoading` prop to the Button component which handles conditionally rendering a loading spinner, disabling the button, and setting `aria-disabled="true"` for accessibility. Uses `<Slottable>` to maintain compatibility with the `asChild` polymorphic property from Radix UI. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>

Merge pull request #11 from mbarbine/jules-5228984919619402302-104e7525 Fix build config export and type errors

Fix type errors and config exports Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>