Forza
repo: ~/Projects/Forza · 12 commits · 0 in last 24h, 0 in last 7d ·
Skills used
- /index3
- /mcp2
- /html-to-design1
- /capture1
Creative ideas + design notes
Commits with substantial prose (≥120 chars) — the rationale behind each move.
b11a47c · 2026-05-20 · Forza: untrack .bak-20260520 siblings + gitignore *.bak-* (figma strip rollback backups)
The 6 .bak files from the previous commit still contain the stripped figma
capture.js line for rollback purposes — they should NOT be in git history.
git rm --cached the .bak siblings + gitignore *.bak-* so future sed -i.bak
operations across this project don't accidentally commit their backups.
424b3c2 · 2026-05-20 · Forza: strip 3rd-party figma.com capture.js from 5 prod theme HTML files
These pages were leaking https://mcp.figma.com/mcp/html-to-design/capture.js
as an external <script> on every page load — a Figma design-capture artifact
that supply-chain-attacks would ride if the Figma MCP endpoint were ever
compromised. Removed via sed -i.bak from:
- theme-1-alliott-global/index.html
- theme-2-bilingual-split/index.html
- theme-3-costa-rica-modern/{index,about,contact,services-legal}/index.html
Total: 6 files (the audit said 5 — one extra found). All deletions preserve
the surrounding markup; rollback via .bak-20260520 sed siblings if needed.
Pre-flight: grep mcp.figma.com across project = 0 refs after strip.
File tree
13 files tracked. Click any to browse the source at HEAD.
rendered in 1ms