feat(web): 프로필 수정에서 블로그 URL 편집 + RSS 재감지 (#60)#60
Merged
Conversation
- 프로필 수정 페이지에 블로그 URL 입력 필드 추가 - blogUrl 변경 시 rssUrl null 초기화 후 after()로 RSS 비동기 재감지 - profileImageUrl에 isSafeUrl() SSRF 체크 적용 (기존 프로토콜만 체크 → 강화) - 소셜 URL(github/linkedin/instagram)에 isSafeUrl() + 길이 검증 추가 - name/nickname/blogUrl 서버사이드 길이 검증 추가 - 중복 success 상태 제거 (sonner toast만 사용) Co-Authored-By: Claude <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Changes
packages/web/src/app/(user)/profile/edit/page.tsxpackages/web/src/app/api/profile/edit/route.tsafter()비동기 RSS 재감지, profileImageUrl/소셜 URL에isSafeUrl()적용, name/nickname/blogUrl 길이 검증CLAUDE.mddocs/ARCHITECTURE.mdDesign Decisions
after()로 비동기 처리detectRssUrl이 최대 20초 블로킹 가능 → Vercel 서버리스 타임아웃 방지isSafeUrl()적용javascript:프로토콜 XSS 방지 + CLAUDE.md 보안 컨벤션 일관성Test Plan
🤖 Generated with Claude Code