Skip to content

[codex] Remove production capture script - #4

Merged
ChrysFu merged 1 commit into
mainfrom
codex/remove-production-capture-script
Aug 8, 2026
Merged

ChrysFu merged 1 commit into
mainfrom
codex/remove-production-capture-script

Conversation

@ChrysFu

@ChrysFu ChrysFu commented Aug 8, 2026

Copy link
Copy Markdown
Owner

What changed

  • removes the development-only Figma HTML capture script from the production entrypoint
  • adds a regression test that rejects third-party script URLs in index.html

Why

The public course now stores a localhost companion pairing token in browser storage. A nonessential third-party script on the same page would unnecessarily expand access to that browser context.

Validation

  • npm run lint
  • npm run test:content
  • npm run build:pages
  • PLAYWRIGHT_BASE_URL=http://127.0.0.1:4173/hermes-learning-lab/ npm run test:e2e

@ChrysFu
ChrysFu marked this pull request as ready for review August 8, 2026 13:36
@ChrysFu
ChrysFu merged commit 31f133e into main Aug 8, 2026
2 checks passed
@ChrysFu
ChrysFu deleted the codex/remove-production-capture-script branch August 8, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant