Skip to content

Load the CrawlProof stats tracker on every page - #241

Merged
ralyodio merged 1 commit into
masterfrom
crawlproof-stats-tag
Sep 30, 2026
Merged

ralyodio merged 1 commit into
masterfrom
crawlproof-stats-tag

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Adds the CrawlProof tracker for project 32fc2327-2a83-4401-802a-371df222f679 to apps/web/src/app.html, the SvelteKit document shell, so it loads once in the head of every server-rendered page. Same tag as nixamp.com.

  • CSP: meshhook.com sends no Content-Security-Policy (no header from the app or nginx, no kit.csp), so nothing to widen. The beacon posts to https://crawlproof.com/api/track.
  • API routes and emails are untouched; only the HTML shell changes.
  • Checked: pnpm test 258/258 pass and apps/web build succeeds, same as the master baseline; the tag is in the built server output.

🤖 Generated with Claude Code

Adds the CrawlProof stats.js tag for project 32fc2327-2a83-4401-802a-371df222f679
to the SvelteKit document shell (apps/web/src/app.html), so it is in the head of
every server-rendered page exactly once. The site sends no Content-Security-Policy,
so nothing else needs to allow crawlproof.com.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@ralyodio
ralyodio merged commit d1580a3 into master Sep 30, 2026
2 checks passed
@ralyodio
ralyodio deleted the crawlproof-stats-tag branch September 30, 2026 06:51
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

11 finding(s)

HIGH/CRITICAL: 5 | MEDIUM: 3 | LOW: 3

Severity Rule Location
HIGH secret-database-url apps/web/.env.example:9
HIGH secret-database-url docs/Environment-Setup.md:46
HIGH secret-database-url docs/Environment-Setup.md:132
HIGH secret-slack-webhook docs/WEBHOOK_CONFIGURATION.md:145
HIGH secret-generic-credential src/nodes/README.md:271
MEDIUM sql-template-interpolation apps/web/src/routes/api/secrets/[id]/+server.js:80
MEDIUM sql-template-interpolation apps/web/src/routes/api/workflows/[id]/+server.js:141
MEDIUM sql-template-interpolation src/queue/test-helpers.js:52
LOW sql-template-interpolation docs/Turso-Migration.md:70
LOW secret-generic-credential src/nodes/webhook.test.js:287
LOW sql-template-interpolation workers/orchestrator.test.js:52

Snippets are redacted; ThreatCrush never prints matched credential material.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant