Security (P0): - IsJTIRevoked fails closed on DB error (previously accepted revoked tokens) - Remove dead consume parameter from SCA gate (prevented token replay) - Rate limiter map TTL-based eviction (prevented memory exhaustion) - 2FA attempt map already had LRU eviction (verified) Money Safety (P1): - Gift card transfer refuses expired destination cards - Gift card balance deduction has WHERE balance >= amount guard - Webhook clawback acquires till-sale advisory lock - Sweep/retry lock keys aligned Privacy/Cookies (P2): - Self-host Google Fonts (Playfair Display woff2) - Replace CARTO map tiles with OpenStreetMap raster tiles - Replace Wikimedia/icon-icons external images with local SVGs - Remove external image URLs from CSP Legal (P3): - Privacy policy: add 6 missing data categories (gift cards, 2FA, GDPR, notifications, technical, cookies) - Terms: add Tips section (optionality, non-refundable, same processing as bookings) Code Quality (P4): - twofa.Check accepts db.Querier for testability - depositPromotionMinPct uses literal 0.20 (not misleading alias) - HolidayHours.svelte uses proper type (not as any[]) - Remove stale TODO comments from main.go Testing (P5): - 94 new float64 money validity tests across 3 test files - Cover VAT, splits, refunds, gift cards, rounding, precision boundaries - All 27 backend test packages pass
24 lines
1.3 KiB
XML
24 lines
1.3 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 300">
|
|
<defs>
|
|
<linearGradient id="bg8" x1="0%" y1="0%" x2="100%" y2="100%">
|
|
<stop offset="0%" stop-color="#e0f7fa"/>
|
|
<stop offset="100%" stop-color="#4dd0e1"/>
|
|
</linearGradient>
|
|
</defs>
|
|
<rect width="400" height="300" fill="url(#bg8)" rx="8"/>
|
|
<!-- Chrome/metallic nail effect -->
|
|
<ellipse cx="200" cy="150" rx="55" ry="95" fill="#fff" opacity="0.25"/>
|
|
<defs>
|
|
<linearGradient id="chrome" x1="0%" y1="0%" x2="100%" y2="100%">
|
|
<stop offset="0%" stop-color="#fff" stop-opacity="0.6"/>
|
|
<stop offset="30%" stop-color="#80deea" stop-opacity="0.3"/>
|
|
<stop offset="60%" stop-color="#26c6da" stop-opacity="0.4"/>
|
|
<stop offset="100%" stop-color="#fff" stop-opacity="0.5"/>
|
|
</linearGradient>
|
|
</defs>
|
|
<ellipse cx="200" cy="145" rx="45" ry="80" fill="url(#chrome)"/>
|
|
<!-- Reflection line -->
|
|
<path d="M175 90 Q185 120 180 150 Q175 180 185 200" fill="none" stroke="#fff" stroke-width="2" opacity="0.5"/>
|
|
<path d="M220 85 Q215 115 225 145 Q235 175 220 200" fill="none" stroke="#fff" stroke-width="1" opacity="0.3"/>
|
|
<text x="200" y="260" text-anchor="middle" fill="#00838f" font-family="Georgia, serif" font-size="14" opacity="0.6">Nail Art — Chrome</text>
|
|
</svg> |