SmokeShop

Search the build

7 commits indexed

1. 730d190 2026-08-25 creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
2. c80bff4 2026-05-19 harden window.open instagram external opens with noopener,noreferrer features
3. ce200aa 2026-05-19 add noreferrer to external Google Sheets link (noopener+noreferrer rule)
4. 7115e4d 2026-05-19 add 404-guard middleware before express.static to refuse serving snapshot/.bak files
5. ea54425 2026-05-19 untrack sqlite wal/shm transient files + broaden gitignore for snapshot patterns
6. 6bf7b90 2026-05-13 snapshot: 2 file(s) changed, ~2 modified
7. 5f71b03 2026-05-06 initial scaffold (gitify-all 2026-05-06)

Authors

• Steve7

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

File tree

20 files tracked. Click any to browse the source at HEAD.

• .gitignore
• CLAUDE.md
• Smoke Shop.xlsx
• ecosystem.config.js
• lib/content-calendar.js
• lib/gemini.js
• lib/image-generator.js
• lib/instagram-api.js
• lib/scheduler.js
• package-lock.json
• package.json
• paper-design.sh
• public/css/styles.css
• public/favicon.svg
• public/index.html
• public/js/app.js
• server.js
• shutdown-monday.sh
• templates/template-a/config.json
• templates/template-b/config.json

Other build journals

← Sascha  ·  all 4 projects  ·  StudentLoanTracker →

Export

commits.csv · feed.atom · project.json · commits.json