Spaces:
Running
Running
Commit History
26 days ago
-
fix(cert): auto-issue certificate on payment confirmation & sync course to 100% certified
46ab86e
-
feat: normalize course titles into professional canonical titles and remove emojis across app
d08bef8
-
refactor(assessment): utilize active course context for LLM generation, increase timeout, configure hot-reload for dev server, and clean up legacy dead code
grimf237798
-
🔒 CRITICAL SECURITY FIX: Remove all credential leaks from browser console
- Replace all console.log/error/warn with secure logger that only works in development - Created secureLogger.ts that automatically redacts sensitive data (API keys, user IDs, tokens) - Fixed duplicate logger imports that were breaking the build - Updated certificationAPI.ts to use secure logging (no more API keys/session IDs in console) - Enhanced environment security with secureEnvironment.ts validator - Updated supabase.ts to use secure configuration - Modified vite.config.ts to strip ALL console statements from production builds - Added security headers and build optimizations BEFORE: All API keys, user data, and credentials were visible in browser console AFTER: Zero sensitive data exposure - production builds have no logging whatsoever Production Security Status: 🟡 IMPROVED (logging secured, API keys still need server proxy) Development Security: ✅ SECURE (sensitive data redacted from logs)33927c8