4 commits

Author	SHA1	Message	Date
Jennie Robinson Faber	e791a0d480	fix(onboarding): fix widget links, isComplete logic, and event slugs ... Use dynamic href for external links, check completedAt for graduation, link events by slug instead of _id, and remove stale click handler.	2026-04-09 23:52:04 +01:00
Jennie Robinson Faber	5d3b04af48	feat(onboarding): add useOnboarding composable	2026-04-09 22:41:30 +01:00
Jennie Robinson Faber	1e30ba23cd	feat: add testing infrastructure — Vitest, Playwright, CI, git hooks ... Add comprehensive testing covering 420 unit/handler tests across 24 Vitest files, 9 Playwright E2E specs, accessibility scans, and visual regression. Includes GitHub Actions CI, Husky pre-push hook, and TESTING.md docs.	2026-04-04 16:07:21 +01:00
Jennie Robinson Faber	29c96a207e	Add Vitest security test suite and update security evaluation doc ... Set up Vitest with server (node) and client (jsdom) test projects. 79 tests across 8 files verify all Phase 0-1 security controls: escapeHtml sanitization, DOMPurify markdown XSS prevention, CSRF enforcement, security headers, rate limiting, auth guards, profile field allowlist, and login anti-enumeration. Updated SECURITY_EVALUATION.md with remediation status, implementation summary, and automated test coverage details.	2026-03-01 12:30:06 +00:00