Repository navigation
Beta test users returns: SEO, security, performance, accessibility, and docs - #95
Merged
Merged
Conversation
- Added Content Security Policy (CSP) to mitigate XSS risks and define allowed sources for various content types. - Introduced security headers including X-Frame-Options, X-Content-Type-Options, and Strict-Transport-Security to strengthen application security. - Configured the application to drop the `x-powered-by` header for improved security posture.
…ronment - Modified the script-src directive to conditionally allow 'unsafe-eval' during development, ensuring compatibility with React + Turbopack while maintaining a stricter policy in production.
- Added robots.txt and sitemap.xml for improved search engine indexing and crawling. - Introduced opengraph-image.tsx for site-wide social media previews. - Created a new FAQ section with localized content to address common user questions. - Updated landing page to include the FAQ section and enhanced metadata for better SEO performance. - Added alt text for images in the screenshots section to improve accessibility and SEO.
…ty-audit Fix/lui 110 113 seo and security audit
- Introduced `SheetCloseButton` for consistent close button functionality across various sheets, improving accessibility and user experience. - Updated `next.config.ts` to include bundle size optimizations by excluding unused Session Replay SDK components, reducing client bundle size. - Made minor adjustments to text styles in several components for improved readability and consistency. - Added new browser support configurations in `package.json` to ensure compatibility with the latest versions of major browsers.
…rf-and-accessibility Enhance UI components and optimize bundle size
- Created a new Help page with localized content and structured sections for better user guidance. - Implemented HelpSections component to display help content in an accordion format, enhancing user experience and accessibility. - Integrated translation support for dynamic content rendering based on user locale.
- Added a new Help page with localized content to guide users on how to use Strive effectively. - Updated the sitemap to include the new Help page and adjusted public paths accordingly. - Enhanced the landing page and various components to include links to the Help section, improving accessibility and user navigation. - Improved error handling in forms to provide clearer messages for network issues, enhancing user experience during authentication processes.
…page Feat/UI 108 110 docs and help page
Strive PR Agent ReviewThe review could not be generated for this run (model unavailable or rate-limited). Push again to retry. |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Promote dev → main: SEO, security, performance, accessibility, and docs
Three lots of post-beta improvements, config-heavy and low-risk. Ships the SEO/security surface so the out-of-repo indexing steps (Search Console, backlink) can start once live. No DB schema changes in these lots.
Lot 1 — SEO indexing (LUI-110) + Security headers (LUI-113)
next.config.ts: Content-Security-Policy (Supabase REST/wss/Storage + Sentry EU ingest whitelisted;'unsafe-eval'dev-only, never in prod),X-Frame-Options,X-Content-Type-Options,Referrer-Policy,Permissions-Policy,Strict-Transport-Security;x-powered-byremoved.app/robots.ts+app/sitemap.ts(en/fr URLs withhreflangincl.x-default), per-localegenerateMetadataon the landing (title/description/keywords/canonical/OpenGraph/Twitter), and a generated OG image (app/opengraph-image.tsx).FAQPageJSON-LD (EN/FR), keyword-rich hero subline, descriptive image alt text.proxy.tsso the locale rewrite no longer 404srobots.txt/sitemap.xml/opengraph-image.Lot 2 — Performance (LUI-112) + Accessibility/RGAA (LUI-107) + Close buttons (LUI-105)
prefetch={false}on the sign-up CTAs (stops eagerly loading the ~215 KB Supabase auth chunk on the marketing page), modernbrowserslist(drops legacy polyfills), SentrybundleSizeOptimizationsexcluding unused Session Replay,qualityon landing wireframes.text-muted-foregrounddropped to the solid token (passes 4.5:1 in both themes) across ~17 spots; a colour-only status in the circle feed gained a screen-reader label.SheetCloseButtonwith a 44 px hit area added to the three sheets that lacked one; all existing modal/sheet closes migrated to it for a consistent ≥44 px target.Lot 3 — Help page (LUI-108) + README (LUI-114)
/help(/help,/fr/help): locale-aware, indexable, EN/FR via next-intl, six sections followingUX_WRITING.mdterminology. Accordion useskeepMountedso all text ships in the HTML (crawlable) even collapsed; TOC links deep-open sections. Entry points: landing footer + Settings (next to Send feedback), added to the sitemap.Failed to fetch (…supabase.co)(4 forms);images.qualitiesdeclared for Next 16.Verification
tsc,eslint,next build,vitest(76/76) green throughout. Runtime-checked (EN + FR): security headers present, robots/sitemap/OG served, per-locale metadata + FAQ/help JSON/text in the HTML,/helpreturns 200, contrast fixes render.Follow-ups (post-merge, out of repo)
striveapp.cc, submitsitemap.xml, request indexing on the root.