Security (P0): - IsJTIRevoked fails closed on DB error (previously accepted revoked tokens) - Remove dead consume parameter from SCA gate (prevented token replay) - Rate limiter map TTL-based eviction (prevented memory exhaustion) - 2FA attempt map already had LRU eviction (verified) Money Safety (P1): - Gift card transfer refuses expired destination cards - Gift card balance deduction has WHERE balance >= amount guard - Webhook clawback acquires till-sale advisory lock - Sweep/retry lock keys aligned Privacy/Cookies (P2): - Self-host Google Fonts (Playfair Display woff2) - Replace CARTO map tiles with OpenStreetMap raster tiles - Replace Wikimedia/icon-icons external images with local SVGs - Remove external image URLs from CSP Legal (P3): - Privacy policy: add 6 missing data categories (gift cards, 2FA, GDPR, notifications, technical, cookies) - Terms: add Tips section (optionality, non-refundable, same processing as bookings) Code Quality (P4): - twofa.Check accepts db.Querier for testability - depositPromotionMinPct uses literal 0.20 (not misleading alias) - HolidayHours.svelte uses proper type (not as any[]) - Remove stale TODO comments from main.go Testing (P5): - 94 new float64 money validity tests across 3 test files - Cover VAT, splits, refunds, gift cards, rounding, precision boundaries - All 27 backend test packages pass
19 lines
987 B
XML
19 lines
987 B
XML
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 300">
|
|
<defs>
|
|
<linearGradient id="bg1" x1="0%" y1="0%" x2="100%" y2="100%">
|
|
<stop offset="0%" stop-color="#fce4ec"/>
|
|
<stop offset="100%" stop-color="#f8bbd0"/>
|
|
</linearGradient>
|
|
</defs>
|
|
<rect width="400" height="300" fill="url(#bg1)" rx="8"/>
|
|
<!-- Nail shape silhouette -->
|
|
<ellipse cx="200" cy="150" rx="60" ry="100" fill="#e91e63" opacity="0.15"/>
|
|
<ellipse cx="200" cy="150" rx="45" ry="85" fill="#e91e63" opacity="0.25"/>
|
|
<!-- Polish stroke -->
|
|
<path d="M200 65 Q215 120 200 150 Q185 120 200 65" fill="#f06292" opacity="0.6"/>
|
|
<!-- Decorative dots -->
|
|
<circle cx="200" cy="100" r="4" fill="#fff" opacity="0.7"/>
|
|
<circle cx="200" cy="115" r="3" fill="#fff" opacity="0.5"/>
|
|
<circle cx="200" cy="130" r="2" fill="#fff" opacity="0.3"/>
|
|
<text x="200" y="260" text-anchor="middle" fill="#ad1457" font-family="Georgia, serif" font-size="14" opacity="0.6">Nail Art — Classic</text>
|
|
</svg> |