• Joined on 2026-05-03
null pushed to dev at null/Queue-North-Website 2026-05-17 16:17:57 -05:00
b428348a4c docs: close issues #45 #46 #47 — already implemented in earlier batches (batch 0.6.2)
null closed issue null/Queue-North-Website#46 2026-05-17 16:17:36 -05:00
Service Card Icons (Batch 0.6.1)
null closed issue null/Queue-North-Website#47 2026-05-17 16:17:36 -05:00
Cisco Partnership Signals (Batch 0.6.2)
null closed issue null/Queue-North-Website#45 2026-05-17 16:17:27 -05:00
Nav Active-State Styling (Batch 0.6.0)
null pushed to dev at null/Queue-North-Website 2026-05-17 16:10:14 -05:00
56bdf07216 fix: close issues #12 #15 #17 #18 — CSP nonce, API retry, input debounce, caching verified (batch 0.6.1)
null commented on issue null/Queue-North-Website#17 2026-05-17 16:10:02 -05:00
P3: No input debouncing on Contact/Support forms

Closed in batch 0.6.1. Added useDebounce hook (300ms) — validation errors are debounced while user input remains immediate.

null closed issue null/Queue-North-Website#18 2026-05-17 16:10:02 -05:00
P3: No caching strategy for API GET requests
null commented on issue null/Queue-North-Website#18 2026-05-17 16:10:02 -05:00
P3: No caching strategy for API GET requests

Closed in batch 0.6.1. Already resolved — @tanstack/react-query with staleTime: 5m provides cache-busting, stale-while-revalidate, and background refetching for all GET requests.

null commented on issue null/Queue-North-Website#12 2026-05-17 16:10:01 -05:00
P2: CSP allows unsafe-inline for styles — weakens XSS protection

Closed in batch 0.6.1. Removed 'unsafe-inline' from CSP styleSrc — verified built SPA has no inline styles, all CSS is in extracted files.

null closed issue null/Queue-North-Website#15 2026-05-17 16:10:01 -05:00
P2: No retry logic for transient API failures in frontend
null commented on issue null/Queue-North-Website#15 2026-05-17 16:10:01 -05:00
P2: No retry logic for transient API failures in frontend

Closed in batch 0.6.1. Added retryFetch utility with exponential backoff (1s, 2s, 4s) for 5xx and network failures. Respects Retry-After on 429.

null closed issue null/Queue-North-Website#17 2026-05-17 16:10:01 -05:00
P3: No input debouncing on Contact/Support forms
null closed issue null/Queue-North-Website#12 2026-05-17 16:10:00 -05:00
P2: CSP allows unsafe-inline for styles — weakens XSS protection
null opened issue null/Queue-North-Website#46 2026-05-17 16:02:11 -05:00
Service Card Icons (Batch 0.6.1)
null opened issue null/Queue-North-Website#47 2026-05-17 16:02:11 -05:00
Cisco Partnership Signals (Batch 0.6.2)
null opened issue null/Queue-North-Website#45 2026-05-17 16:02:06 -05:00
Nav Active-State Styling (Batch 0.6.0)
null closed issue null/Queue-North-Website#13 2026-05-17 15:48:50 -05:00
P2: RATE_LIMIT_PER_MINUTE env var NaN on invalid input — rate limiting silently disabled
null pushed to dev at null/Queue-North-Website 2026-05-17 15:48:46 -05:00
ca67974c5f fix(docker): add python3/make/g++ for better-sqlite3 native build (batch 0.6.8)
null pushed to dev at null/Queue-North-Website 2026-05-17 15:47:03 -05:00
e11aefd184 fix: audit issues #10 #14 #16 #19 — CORS errors, JSON middleware, Zoho fields, noValidate (batch 0.6.8)
null closed issue null/Queue-North-Website#10 2026-05-17 15:46:56 -05:00
P1: Frontend api.js does not handle CORS errors — generic error message shown