wersja 0.1.3 by asterixix · Pull Request #3 · asterixix/tecza-app

asterixix · 2025-08-17T20:35:19Z

uruchomienie Prettiera do lintingu aby kod lepiej wyglądał i był czytelny,
Poprawki w UI profili przy urządzeniach mobilnych aby avatary nie były "zjedzone",
Poprawki w DB connections przy Wydarzeniach i Społecznościach
Poprawki w wiadomościach
Notyfikacje already implemented for tests

- Removed unnecessary semicolons and adjusted line breaks for consistency. - Updated toast hook to use concise syntax and improved error handling. - Refactored key manager and message encryption utilities for clarity. - Enhanced media processing logic with better error handling and cleanup. - Added Prettier configuration and ignore files for consistent code style.

- Added a new API route for content moderation using OpenRouter. - Integrated moderation checks in the PostComposer component to handle AI moderation decisions. - Enhanced the ContentModeration component with functions to hide and restore various content types. - Updated the ProfilesModeration component to allow banning and unbanning users with appropriate UI feedback. - Refactored roles management in the RolesAdmin component to use RPC calls for setting roles and badges. - Improved user interface in the ProfilesModeration and SiteFooter components. - Introduced helper functions for building typed arguments for admin RPCs. - Added safety checks for blob URLs in the PostComposer component. - Updated versioning information in the site footer components. - Normalized line endings for source files with .gitattributes.

- Updated RainbowLikeButton component for better code formatting and readability. - Enhanced ReportButton component with improved formatting and structure. - Refactored ScrollBar component for clearer className handling. - Improved Select component structure for better readability. - Cleaned up Separator component for consistent formatting. - Refactored Sheet component for better code organization. - Enhanced Switch component for improved readability. - Refactored Tabs component for clearer structure and formatting. - Improved Textarea component for better readability and structure. - Refactored Tooltip component for consistent formatting. - Updated useAuth hook for improved readability and structure. - Enhanced useMessages hook for better code organization and clarity. - Refactored KeyManager and MessageEncryption classes for improved readability. - Cleaned up Vault functions for better code organization. - Improved chunked-upload and media-processor functions for clearer structure. - Added .editorconfig and .prettierrc for consistent code formatting. - Implemented ResetPasswordRedirect component for handling password reset redirects.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

- Updated the sandbox attribute in PostItem component to allow specific scripts and origins for improved security. - Introduced a new function to validate blob URLs in MediaProcessor, ensuring only valid URLs are processed. - Refactored image processing logic to include cleanup of object URLs and improved error handling for image loading and processing.

…actions

vercel · 2025-08-17T20:35:25Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
tecza-app	Ready	Preview	Comment	Aug 17, 2025 8:48pm

Copilot

Pull Request Overview

This PR implements code formatting improvements using Prettier linting to enhance code readability and consistency, along with several UI fixes for mobile devices, database connection improvements, message fixes, and initial notifications implementation for testing.

Applied Prettier formatting throughout the codebase for consistent code style
Fixed mobile UI issues with avatar display in profiles
Improved database connections for Events and Communities
Enhanced message functionality with reactions and link previews

Reviewed Changes

Copilot reviewed 103 out of 122 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
src/lib/utils.ts	Applied Prettier formatting to quote styles
src/lib/moderation.ts	New content moderation module with consistent formatting
src/lib/media/media-processor.ts	Enhanced media processing with better error handling and URL validation
src/lib/crypto/*	Consistent formatting applied to cryptographic modules
src/hooks/*	Prettier formatting applied to React hooks
src/components/ui/*	Comprehensive formatting updates across UI components
src/components/site/*	Site-wide components formatted and notifications popover added
src/components/messages/*	Enhanced message components with reactions and link preview support
src/components/dashboard/*	Dashboard components with improved formatting and functionality

_{You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.}

Copilot · 2025-08-17T20:36:33Z

+            canvas.toBlob((blob) => {
+              resolve(blob ? URL.createObjectURL(blob) : null)
+            }, "image/jpeg")
+          } finally {


The variable currentUrl is referenced in the finally block but may be undefined if the try block throws an error before assignment. This will cause a runtime error when calling cleanup(currentUrl).

Copilot · 2025-08-17T20:36:33Z

+          }
+          if (!isValidBlobUrl(objectUrl)) {
+            throw new Error("Invalid object URL scheme")
+          }


The isValidBlobUrl function is called twice - once at line 167 and again at line 168. This is redundant and could be optimized by storing the result in a variable.

Suggested change

}

// Redundant isValidBlobUrl check removed

Copilot · 2025-08-17T20:36:34Z

@@ -0,0 +1,273 @@
+/* eslint-disable */


Using a blanket eslint-disable comment disables all linting rules for the entire file. This should be avoided as it can hide important code quality issues. Consider disabling specific rules or fixing the underlying issues.

Suggested change

/* eslint-disable */

Copilot · 2025-08-17T20:36:34Z

  const linkMedia = media.filter((u) => !(isImage(u) || isVideo(u)))

+  // Safe host check for Tenor embeds. Avoid substring checks; parse and whitelist.
+  function isTenorHost(raw: string) {


The Tenor host validation function is good, but the iframe implementation on lines 708-716 still uses 'allow-scripts' in the sandbox attribute, which could pose a security risk. Consider if scripts are truly necessary for GIF display.

Copilot · 2025-08-17T20:36:35Z

+    if (!url) {
+      setLinkPreview(null)
+      return
+    }


The regex pattern for URL extraction is too permissive and could match malicious URLs. Consider using a more restrictive pattern or validating the URL against a whitelist of allowed domains before making API calls.

Suggested change

}

// Only allow link previews for whitelisted domains

const ALLOWED_DOMAINS = [

"example.com",

"www.example.com",

// Add more allowed domains as needed

];

useEffect(() => {

const urlMatch = message.match(/https?:\/\/[\w.-]+(?:\/[\w\-./?%&=]*)?/i);

const url = urlMatch?.[0];

if (!url) {

setLinkPreview(null)

return

}

let hostname: string | null = null;

try {

hostname = new URL(url).hostname;

} catch {

setLinkPreview(null);

return;

}

if (!ALLOWED_DOMAINS.includes(hostname)) {

setLinkPreview(null);

return;

}

…idation, update NotificationsPopover dependencies, and improve MediaProcessor URL handling - Updated the sandbox attributes in PostItem to allow popups. - Enhanced the link preview functionality in MessageComposer to restrict previews to whitelisted domains. - Modified the useEffect dependencies in NotificationsPopover to include actors. - Improved URL handling in MediaProcessor to ensure safe cleanup of object URLs.

… remove legacy /messages route, keep new messaging, communities, events, and notifications implementations

asterixix and others added 9 commits August 16, 2025 14:57

Update src/components/dashboard/post-item.tsx

ee13a96

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update src/lib/media/media-processor.ts

5ffb25a

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update src/lib/media/media-processor.ts

4b5a9a6

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Update src/components/dashboard/post-item.tsx

0270e81

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

feat: add notifications popover component with real-time updates and …

bc880bb

…actions

Copilot AI review requested due to automatic review settings August 17, 2025 20:35

Copilot AI reviewed Aug 17, 2025

View reviewed changes

vercel Bot deployed to Preview August 17, 2025 20:42 View deployment

Merge origin/main into dev: resolve conflicts by keeping dev changes,…

54d5684

… remove legacy /messages route, keep new messaging, communities, events, and notifications implementations

vercel Bot deployed to Preview August 17, 2025 20:48 View deployment

asterixix merged commit 9fccf06 into main Aug 17, 2025
3 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

wersja 0.1.3#3

wersja 0.1.3#3
asterixix merged 11 commits into
mainfrom
dev

asterixix commented Aug 17, 2025

Uh oh!

vercel Bot commented Aug 17, 2025 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Aug 17, 2025

Uh oh!

Copilot AI Aug 17, 2025

Uh oh!

Copilot AI Aug 17, 2025

Uh oh!

Copilot AI Aug 17, 2025

Uh oh!

Copilot AI Aug 17, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

-    }
+  // Only allow link previews for whitelisted domains
+  const ALLOWED_DOMAINS = [
+    "example.com",
+    "www.example.com",
+    // Add more allowed domains as needed
+  ];
+  useEffect(() => {
+    const urlMatch = message.match(/https?:\/\/[\w.-]+(?:\/[\w\-./?%&=]*)?/i);
+    const url = urlMatch?.[0];
+    if (!url) {
+      setLinkPreview(null)
+      return
+    }
+    let hostname: string | null = null;
+    try {
+      hostname = new URL(url).hostname;
+    } catch {
+      setLinkPreview(null);
+      return;
+    }
+    if (!ALLOWED_DOMAINS.includes(hostname)) {
+      setLinkPreview(null);
+      return;
+    }

Conversation

asterixix commented Aug 17, 2025

Uh oh!

vercel Bot commented Aug 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Copilot AI Aug 17, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Aug 17, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Aug 17, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Aug 17, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Aug 17, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel Bot commented Aug 17, 2025 •

edited

Loading