Commit 0f22c5c added the /privacy route to server.js but did not stage
the HTML file itself — it was created but left untracked. Now committed.
Revert: git revert HEAD
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
f17e95d · 2026-09-10 · TK-11341: strip AdSense loader from private /inbox route (serve-time guard); revert to restore
Serve inbox/notifications/bookmarks with any AdSense loader stripped at
serve-time (before express.static), so a stale on-disk file can never re-leak
ads on a private, login-gated page. Public content pages keep their loader.
Root cause of the live leak: commit 5a6874a's per-file fix was never deployed
to prod; this guard also hardens against that recurrence.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BQfWFUMW9XZMNwUAuHNtFq
698091f · 2026-06-19 · Add home-history module with LA County parcel + LADBS permit lookup
- lib/home-history.js: CommonJS module exporting getHomeHistory(address)
pulls Tier A data from LA County GIS ArcGIS REST (free, no auth) and
LADBS Socrata permit datasets; JSON cache at data/home-history.json;
resilient (never throws, returns honest unavailable stub on no data)
- data/home-history.json: pre-seeded for 13 BubbesBlock lead addresses;
2 with real assessor data (18406 Bessemer St + 18700 Ventura Blvd),
11 honest unavailable stubs (fictionally-numbered addresses not in the
LA County public parcel roll)
- scripts/seed-home-history.js: one-shot cache warmer
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
1adfcbd · 2026-05-11 · security: untrack .env (still present on disk, just not in git)
.env was committed before .gitignore exclusion was in place. File remains
on disk and functional; this stops future commits and prevents the next
git push (if any remote is ever added) from leaking secrets.
No remote currently configured, so no public exposure occurred.
File tree
32 files tracked. Click any to browse the source at HEAD.