Skip to content

fix(export): drop the localhost oEmbed discovery tag from static export (REQ-117)#368

Merged
avrabe merged 1 commit into
mainfrom
feat/req-117-oembed-export-leak
May 31, 2026
Merged

fix(export): drop the localhost oEmbed discovery tag from static export (REQ-117)#368
avrabe merged 1 commit into
mainfrom
feat/req-117-oembed-export-leak

Conversation

@avrabe
Copy link
Copy Markdown
Contributor

@avrabe avrabe commented May 31, 2026

Bug-hunt finding (REQ-117, 3/3 lens-confirmed). Static export --format html emitted an oEmbed discovery <link> pointing at http://localhost:<port> on every page — broken metadata with no server (export's RepoContext.port is 0). Now emitted only when served. Verified on a real export (0 oEmbed tags, 0 localhost:0); Playwright guard added.

🤖 Generated with Claude Code

…rt (REQ-117)

Bug-hunt finding (path-url-leakage, 3/3 lens-confirmed). Every exported
artifact page emitted an oEmbed discovery `<link>` pointing at
`http://localhost:<port>` — meaningful for the live serve dashboard, but broken
metadata in `export --format html`, which is static and has no server (its
RepoContext.port is 0). The tag is now emitted only when served (non-zero
port). Verified on a real export: 0 oEmbed `<link>` tags, 0 `localhost:0`.
Playwright guard added. Filed as REQ-117 (implemented).

Implements: REQ-117
Verifies: REQ-117
Refs: REQ-105

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@github-actions
Copy link
Copy Markdown

📐 Rivet artifact delta

Change Count
Added 0
Removed 0
Modified 1
Downstream impacted (depth ≤ 5) 0

Graph

graph LR
  REQ_117["REQ-117"]:::modified
  classDef added fill:#d4edda,stroke:#28a745,color:#155724
  classDef removed fill:#f8d7da,stroke:#dc3545,color:#721c24
  classDef modified fill:#fff3cd,stroke:#ffc107,color:#856404
  classDef overflow fill:#e2e3e5,stroke:#6c757d,color:#495057,stroke-dasharray: 3 3
Loading
Modified
ID Changes
REQ-117

📎 Full HTML dashboard attached as workflow artifact rivet-delta-pr-368download from the workflow run.

Posted by rivet-delta workflow. The graph shows only changed artifacts; open the HTML dashboard (above) for full context.

Copy link
Copy Markdown

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Rivet Criterion Benchmarks'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.20.

Benchmark suite Current: 60fed60 Previous: 68bc025 Ratio
store_lookup/100 2112 ns/iter (± 11) 1660 ns/iter (± 3) 1.27
store_lookup/1000 25344 ns/iter (± 406) 19535 ns/iter (± 508) 1.30
traceability_matrix/1000 64364 ns/iter (± 439) 41047 ns/iter (± 92) 1.57
query/1000 7375 ns/iter (± 74) 5292 ns/iter (± 27) 1.39

This comment was automatically generated by workflow using github-action-benchmark.

@codecov
Copy link
Copy Markdown

codecov Bot commented May 31, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@avrabe avrabe merged commit a1359fa into main May 31, 2026
19 of 39 checks passed
@avrabe avrabe deleted the feat/req-117-oembed-export-leak branch May 31, 2026 13:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant