5x: contrarian-gate fixes verified + report updated

8bfdf536669df14e666902566b8894e6a5de987e · 2026-08-17 17:15:46 -0700 · Steve Abrams

Files touched

M 5x/REPORT.md

Diff

commit 8bfdf536669df14e666902566b8894e6a5de987e
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Aug 17 17:15:46 2026 -0700

    5x: contrarian-gate fixes verified + report updated
---
 5x/REPORT.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/5x/REPORT.md b/5x/REPORT.md
index 1371564..561bcc4 100644
--- a/5x/REPORT.md
+++ b/5x/REPORT.md
@@ -7,3 +7,10 @@
 | 3 | 7/7 | 0 | — | — |
 
 **Result: CLEAN TWICE → stable.** Six-way: M1 HTTP ✓ · M2 render ✓ · M3 E2E ✓ · Chrome ✓ · Safari ✓ · Firefox ✓ · clickthrough 10/10 (sort ×4, type ×5, density). Root cause of sweep-1 defect: wall requested /thumbs/<domain>.jpg for the 5 sites lacking a screenshot → 404 console noise (visually handled by onerror, but real console errors). Fixed by having the server flag which domains have thumbnails so the client never requests a missing one.
+
+## Contrarian gate (post-5x) — 3 holes the clickthrough couldn't reach, all fixed
+The /3x clickthrough tests the selects but never the tile-click (goLive). Cody caught:
+1. **Silent iframe failure** on XFO/frame-ancestors sites — clicking a blocked tile = blank box, no feedback. My first client-side "no-load = blocked" heuristic FAILED (Chromium fires load on blocked frames). Real fix: server probes frame headers (58 sites blocked), flags each; goLive opens blocked sites in a new tab instead of a doomed iframe. VERIFIED via playwright (claimmyaddress → new tab, 818butler → iframe).
+2. **/thumbs unauthenticated** while wall is gated — now Basic-Auth gated (401→200 verified).
+3. **Live iframes wiped on re-sort/filter** — LIVE set restores them on re-render (verified still-live after re-sort).
+All committed; no pageerrors; regression sweep clean.

← a5fd5d4 5x/contrarian: server-side frame-block detection (58 sites) · back to Domain Landings · chore: refactor (checkBasicAuth helper), v0.2.0 (session clo df81e89 →