Commit Graph

5 Commits

Author SHA1 Message Date
Peter Foster
14f1e53c07 Security+Perf: CSP nonces, robots.txt cleanup, minify JS
- index.php: replace unsafe-inline CSP with per-request nonces on all 13 inline scripts/styles
- robots.txt: remove sensitive config filenames (db-config, email-config, recaptcha-config)
- main.min.js: actually minified with terser (37KB -> 16KB, -38% gzipped)
2026-03-22 04:06:53 +00:00
root
d8622b7f9e Remove ISO 27001 certification claims
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-12 20:33:56 +00:00
root
f495ee23c2 Accessibility fixes and form session expiration fix
- Fix color contrast: change #179e83 to #148069 for WCAG AA compliance
- Add ARIA attributes to mobile nav toggle (aria-expanded, aria-controls)
- Implement focus trap on mobile menu with Escape key support
- Add aria-hidden to decorative hero SVG
- Add ARIA validation to contact form (aria-invalid, aria-describedby)
- Fix touch target sizes (notification close button 48x48px)
- Fix form session expiration by relaxing timestamp validation
- Add cache busting (v1.1.0) to JS/CSS files
- Update service worker cache version to force refresh

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-12 20:22:49 +00:00
root
f445c877e7 Fix contact form by re-minifying main.js with reCAPTCHA support
The minified JS was out of sync with the source file, missing the
grecaptcha integration, XMLHttpRequest header, and interaction token
that the server-side handler requires.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-07 11:57:40 +00:00
root
4eae8538c8 Backup database and code changes - 2025-06-08 18:36:00 2025-06-08 18:36:00 +00:00