Skip to content

m/p - #36

Merged
StanBarrows merged 15 commits into
productionfrom
main
Oct 22, 2026
Merged

m/p#36
StanBarrows merged 15 commits into
productionfrom
main

Conversation

@StanBarrows

Copy link
Copy Markdown
Contributor

No description provided.

Sebastian BURGIN-FIX (ext) and others added 4 commits October 22, 2026 16:03
tests.yml was removed when CI was aligned with laravel-start, so the
badge image 404'd. Point it at the Pest database matrix workflow, which
runs on pushes to main, and use the renamed repository URL.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The page clone is rendered as SVG and must be valid XML. Attributes such
as Alpine's :class or x-on:click are not, and a single one made the
browser render the whole capture as an empty image (gray in annotation
mode, white when sent). Strip such attributes from the clone only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs: fix broken Tests badge in README
@StanBarrows StanBarrows changed the title m/ m/p Oct 22, 2026
StanBarrows and others added 11 commits October 22, 2026 16:35
fix(widget): Alpine/Vue attributes blank the screenshot
docs: document multiple origins per project
…nd share link

- feedback:link creates a signed, expiring link to an HTML page with all form
  details, console/network log and the screenshot (inline + download). Team
  links can complete and reopen (--by is logged), --read-only omits that.
- The store response returns a read-only share link (FEEDBACK_SHARE_LINK_MINUTES,
  0 = off); the widget shows it on the thank you screen with a copy button.
- Annotation mode gets a close button (top right, bottom right on mobile).
- Only validly signed links pass BlockBrowserNavigation; invalid or expired
  links get the usual empty 403.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…in/docs/multiple-origins' and 'origin/fix/capture-invalid-attributes' into feat/feedback-signed-link
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Firefox lays out the clone slightly differently, so a fixed point missed
the block. A blank capture has no blue pixels at all.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…n empty 403

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
feat: feedback pages with signed links, status changes, share link after sending
…ndency bumps

Keeps stripInvalidAttributes (also removes prefixed names such as
x-on:click) and drops the duplicate dropInvalidAttributes. The full stack
tests now expect no widget on a foreign origin or a blocked IP, the API
still answers those requests with 403.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@StanBarrows
StanBarrows merged commit 6cab006 into production Oct 22, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant