Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
72993ac
feat(server): implement secure, scalable API server with analytics an…
Jackson57279 Aug 23, 2025
c009629
Potential fix for code scanning alert no. 621: Bad HTML filtering regexp
Jackson57279 Aug 23, 2025
1ecde6c
🔒 Fix critical security vulnerabilities in API server
Jackson57279 Aug 23, 2025
35f888f
Enhance security of HTML parsing with improved regex patterns and ite…
Jackson57279 Aug 23, 2025
4f352c4
Resolve merge conflicts between dev-branch and main
Jackson57279 Aug 23, 2025
1ddddf3
🔒 Fix critical security vulnerabilities
Jackson57279 Aug 23, 2025
d9c9ac4
Thing
Jackson57279 Aug 23, 2025
f0d128e
different model please
Jackson57279 Aug 23, 2025
dab568a
fix: resolve JavaScript errors in chat interface and tRPC integration
Jackson57279 Aug 23, 2025
bfc239b
resolve: merge conflict in api-dev-server.ts
Jackson57279 Aug 23, 2025
c87a874
refactor(api): enhance file validation and error handling in API server
Jackson57279 Aug 24, 2025
a4d5911
refactor(api): enhance analytics, error handling, and security measures
Jackson57279 Aug 24, 2025
2df27bd
refactor(security): enhance PII scrubbing and validation logic
Jackson57279 Aug 24, 2025
a3f199d
Potential fix for code scanning alert no. 624: CORS misconfiguration …
Jackson57279 Aug 24, 2025
c07b38b
resolve: merge conflicts in api-dev-server.ts and src/lib/firecrawl.ts
Jackson57279 Aug 24, 2025
847ddce
resolve: merge conflicts in PR #78, keeping security improvements fro…
Jackson57279 Aug 24, 2025
ba0f990
Add current changes before merge
Jackson57279 Aug 24, 2025
99a167f
Resolve merge conflicts prioritizing security improvements from dev-b…
Jackson57279 Aug 24, 2025
776e924
idk
Jackson57279 Aug 24, 2025
557c799
Refactor deployment configuration to separate sensitive data
Jackson57279 Aug 25, 2025
8cd83ed
Refactor ResourcePreloader component to optimize resource hints and u…
Jackson57279 Aug 25, 2025
03f8136
resolve: merge conflicts between qoder branch and main
Jackson57279 Aug 25, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .claude/settings.local.json
Original file line number Diff line number Diff line change
Expand Up @@ -93,7 +93,8 @@
"Bash(ss:*)",
"Bash(git config:*)",
"Bash(git fetch:*)",
"Bash(timeout 30 bun run build)"
"Bash(timeout 30 bun run build)",
"Bash(rg:*)"
],
"deny": []
}
Expand Down
131 changes: 131 additions & 0 deletions .dockerignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,131 @@
# Dependencies
node_modules
npm-debug.log*
yarn-debug.log*
yarn-error.log*

# Build outputs
dist
build
.next
out

# Development files
.git
.gitignore
README.md
*.md
.env
.env.local
.env.development.local
.env.test.local
.env.production.local

# IDE files
.vscode
.idea
*.swp
*.swo
*~

# OS files
.DS_Store
Thumbs.db

# Logs
logs
*.log

# Runtime data
pids
*.pid
*.seed
*.pid.lock

# Coverage directory used by tools like istanbul
coverage
*.lcov

# nyc test coverage
.nyc_output

# Dependency directories
jspm_packages/

# Optional npm cache directory
.npm

# Optional eslint cache
.eslintcache

# Microbundle cache
.rpt2_cache/
.rts2_cache_cjs/
.rts2_cache_es/
.rts2_cache_umd/

# Optional REPL history
.node_repl_history

# Output of 'npm pack'
*.tgz

# Yarn Integrity file
.yarn-integrity

# parcel-bundler cache (https://parceljs.org/)
.cache
.parcel-cache

# Next.js build output
.next

# Nuxt.js build / generate output
.nuxt

# Storybook build outputs
.out
.storybook-out

# Temporary folders
tmp/
temp/

# Editor directories and files
.vscode/
.idea/
*.suo
*.ntvs*
*.njsproj
*.sln
*.sw?

# Test files
test
tests
__tests__
*.test.js
*.test.ts
*.spec.js
*.spec.ts

# Documentation
docs/
*.md

# CI/CD
.github/
.gitlab-ci.yml
.travis.yml
.circleci/

# Docker
Dockerfile*
docker-compose*
.dockerignore

# Kubernetes
k8s-*.yaml
*.yaml
!package.json
!bun.lock
3 changes: 2 additions & 1 deletion API-SERVER-README.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,8 @@ This enhanced API server transforms the original development-only server into a
- **Rate Limiting**: Configurable request limits per IP (default: 1000/min)
- **Health Checks**: Built-in `/health` endpoint for monitoring
- **Security Headers**: HSTS, Content Security Policy (CSP), Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy (COOP), Cross-Origin-Resource-Policy (CORP), and X-Content-Type-Options=nosniff
- **Request Timeout**: Configurable timeout protection (default: 30s)- **Graceful Shutdown**: Clean shutdown with analytics reporting
- **Request Timeout**: Configurable timeout protection (default: 30s)
- **Graceful Shutdown**: Clean shutdown with analytics reporting

### 🛡️ **Enhanced Security**
- **CORS Configuration**: Configurable origins (supports wildcards)
Expand Down
Loading