Files
Crussell/frontend/static/images/portfolio/placeholder-08.svg
T
popertots 4146f8e09a fix: pre-launch review — security, money safety, privacy, legal, code quality
Security (P0):
- IsJTIRevoked fails closed on DB error (previously accepted revoked tokens)
- Remove dead consume parameter from SCA gate (prevented token replay)
- Rate limiter map TTL-based eviction (prevented memory exhaustion)
- 2FA attempt map already had LRU eviction (verified)

Money Safety (P1):
- Gift card transfer refuses expired destination cards
- Gift card balance deduction has WHERE balance >= amount guard
- Webhook clawback acquires till-sale advisory lock
- Sweep/retry lock keys aligned

Privacy/Cookies (P2):
- Self-host Google Fonts (Playfair Display woff2)
- Replace CARTO map tiles with OpenStreetMap raster tiles
- Replace Wikimedia/icon-icons external images with local SVGs
- Remove external image URLs from CSP

Legal (P3):
- Privacy policy: add 6 missing data categories (gift cards, 2FA, GDPR, notifications, technical, cookies)
- Terms: add Tips section (optionality, non-refundable, same processing as bookings)

Code Quality (P4):
- twofa.Check accepts db.Querier for testability
- depositPromotionMinPct uses literal 0.20 (not misleading alias)
- HolidayHours.svelte uses proper type (not as any[])
- Remove stale TODO comments from main.go

Testing (P5):
- 94 new float64 money validity tests across 3 test files
- Cover VAT, splits, refunds, gift cards, rounding, precision boundaries
- All 27 backend test packages pass
2026-08-22 00:34:51 +01:00

24 lines
1.3 KiB
XML

<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 300">
<defs>
<linearGradient id="bg8" x1="0%" y1="0%" x2="100%" y2="100%">
<stop offset="0%" stop-color="#e0f7fa"/>
<stop offset="100%" stop-color="#4dd0e1"/>
</linearGradient>
</defs>
<rect width="400" height="300" fill="url(#bg8)" rx="8"/>
<!-- Chrome/metallic nail effect -->
<ellipse cx="200" cy="150" rx="55" ry="95" fill="#fff" opacity="0.25"/>
<defs>
<linearGradient id="chrome" x1="0%" y1="0%" x2="100%" y2="100%">
<stop offset="0%" stop-color="#fff" stop-opacity="0.6"/>
<stop offset="30%" stop-color="#80deea" stop-opacity="0.3"/>
<stop offset="60%" stop-color="#26c6da" stop-opacity="0.4"/>
<stop offset="100%" stop-color="#fff" stop-opacity="0.5"/>
</linearGradient>
</defs>
<ellipse cx="200" cy="145" rx="45" ry="80" fill="url(#chrome)"/>
<!-- Reflection line -->
<path d="M175 90 Q185 120 180 150 Q175 180 185 200" fill="none" stroke="#fff" stroke-width="2" opacity="0.5"/>
<path d="M220 85 Q215 115 225 145 Q235 175 220 200" fill="none" stroke="#fff" stroke-width="1" opacity="0.3"/>
<text x="200" y="260" text-anchor="middle" fill="#00838f" font-family="Georgia, serif" font-size="14" opacity="0.6">Nail Art — Chrome</text>
</svg>