Add Examples menu, SECURITY.md, refresh README image#7
Merged
Conversation
- New "Examples" top-bar menu with three built-in p5 sketches (bouncing ball, sine wave, spinning square); selecting one loads and runs it. Dropdowns now stack above the Ace editor (header z-index). - Add SECURITY.md tailored to this app (loopback server, sandboxed sketch iframe, constrained save endpoints, offline-first), using GitHub private vulnerability reporting. Linked from README. Closes #2. - README main image switched to assets/img3.png (current UI). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What & why
Three items.
1. README main image
Switched the hero image to
assets/img3.png, which shows the current UI (blue theme, p5 version label, capture panel).2. SECURITY.md — closes #2
Adds a
SECURITY.mdadapted to this project rather than a generic template. It documents the real security model — loopback-only HTTP server, theallow-scripts-only sandboxed sketch iframe, server-generated filenames with an extension allow-list, and the offline-first design — and routes reports through GitHub private vulnerability reporting (Security Advisories) instead of a placeholder email. Linked from the README.Closes #2.
3. Examples menu
New Examples top-bar menu (a second dropdown beside File) with three built-in p5 sketches — bouncing ball, sine wave, spinning square. Selecting one loads it into the editor and runs it. The menu dropdowns now render above the Ace editor: the header gets its own stacking context (
position: relative; z-index: 20) and the menu list'sz-indexwas raised, so open menus overlay the editor instead of being painted under it.Reviewer notes
node --checkpasses; the Debug target builds, links, and re-embeds assets.SECURITY.mduses GitHub private vulnerability reporting as the contact channel (no personal email hard-coded). To make the "Report a vulnerability" link live, enable Private vulnerability reporting in the repo's Security settings.🤖 Generated with Claude Code