code/CL8Y-web
4
0
Fork 0
Code Issues 4 Pull requests 4 Projects Releases Packages Wiki Activity

Official token directory and Render clickjacking headers #9

Closed
PlasticDigits wants to merge 1 commit from issue-2-3-token-directory-headers into main
pull from: issue-2-3-token-directory-headers
merge into: code:main
Conversation 3 Commits 1 Files changed 36 +1106 -319
PlasticDigits commented 2026-08-25 07:20:22 +00:00 (Migrated from gitlab.com)
Copy link

Summary

  • Replaces the #token placeholder with a three-part official directory (addresses, DEX trade venues, listings) sourced from src/data/tokenDirectory.ts. CL8Y DEX is first; AscendEX and Coinbase are gone.
  • Adds copy-to-clipboard from the typed address constants, hash-scroll for header/footer Token links, and clickjacking headers in render.yaml (X-Frame-Options: DENY, frame-ancestors 'none').
  • Documents invariants for third-party agents in skills/cl8y-token-directory and skills/cl8y-host-headers, cross-linked from positioning, AGENTS.md, and PROJECT_GUIDE.md.

Closes #2
Closes #3

Test plan

  • Cold load / and tap Token in the header (desktop + wrapped mobile). Section #token scrolls into view.
  • Repeat from the footer Token link and from a cold /#token load.
  • BSC row shows 0x8F452a1fdd388A45e1080992eFF051b4dd9048d2. Copy → clipboard matches exactly. Explorer opens BscScan.
  • Terra row shows the full CW20 address. Copy matches. Explorer opens Terra Finder.
  • Deny clipboard permission: failure text appears; address stays selectable.
  • Trade group: CL8Y DEX first, then TidalDex / PancakeSwap / Uniswap / GDEX only. No CEX. No “More exchanges”.
  • Listings are a separate group and do not say “Trade on …”. Coinbase is absent.
  • Search src/data, PROJECT_GUIDE.md, rendered /, and dist/ for ascendex.com — zero hits.
  • yarn test, yarn typecheck, yarn lint, yarn build. Optional: yarn preview then yarn test:e2e.
  • After deploy: curl -sI https://cl8y.com shows X-Frame-Options: DENY and/or frame-ancestors 'none'. Confirm the same on the Render URL.
## Summary - Replaces the `#token` placeholder with a three-part official directory (addresses, DEX trade venues, listings) sourced from `src/data/tokenDirectory.ts`. CL8Y DEX is first; AscendEX and Coinbase are gone. - Adds copy-to-clipboard from the typed address constants, hash-scroll for header/footer Token links, and clickjacking headers in `render.yaml` (`X-Frame-Options: DENY`, `frame-ancestors 'none'`). - Documents invariants for third-party agents in `skills/cl8y-token-directory` and `skills/cl8y-host-headers`, cross-linked from positioning, `AGENTS.md`, and `PROJECT_GUIDE.md`. Closes #2 Closes #3 ## Test plan - [ ] Cold load `/` and tap **Token** in the header (desktop + wrapped mobile). Section `#token` scrolls into view. - [ ] Repeat from the footer Token link and from a cold `/#token` load. - [ ] BSC row shows `0x8F452a1fdd388A45e1080992eFF051b4dd9048d2`. Copy → clipboard matches exactly. Explorer opens BscScan. - [ ] Terra row shows the full CW20 address. Copy matches. Explorer opens Terra Finder. - [ ] Deny clipboard permission: failure text appears; address stays selectable. - [ ] Trade group: CL8Y DEX first, then TidalDex / PancakeSwap / Uniswap / GDEX only. No CEX. No “More exchanges”. - [ ] Listings are a separate group and do not say “Trade on …”. Coinbase is absent. - [ ] Search `src/data`, `PROJECT_GUIDE.md`, rendered `/`, and `dist/` for `ascendex.com` — zero hits. - [ ] `yarn test`, `yarn typecheck`, `yarn lint`, `yarn build`. Optional: `yarn preview` then `yarn test:e2e`. - [ ] After deploy: `curl -sI https://cl8y.com` shows `X-Frame-Options: DENY` and/or `frame-ancestors 'none'`. Confirm the same on the Render URL.
PlasticDigits commented 2026-08-25 13:10:07 +00:00 (Migrated from gitlab.com)
Copy link

mentioned in merge request !10

mentioned in merge request !10
PlasticDigits commented 2026-08-25 13:10:10 +00:00 (Migrated from gitlab.com)
Copy link

Superseded by !10. This branch deletes the blog, prerender routes, and MegaETH venues that are already on main. Please close this MR in favor of !10.

Superseded by !10. This branch deletes the blog, prerender routes, and MegaETH venues that are already on `main`. Please close this MR in favor of !10.
PlasticDigits commented 2026-08-25 13:10:14 +00:00 (Migrated from gitlab.com)
Copy link

mentioned in issue #2

mentioned in issue #2
PlasticDigits (Migrated from gitlab.com) closed this pull request 2026-08-26 01:12:00 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
agent:implement

   
agent:ready

   
bug

   
documentation

   
duplicate

   
enhancement

   
good first issue

   
help wanted

   
invalid

   
question

   
ready

   
wontfix
No labels
agent:implement
agent:ready
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
ready
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
code/CL8Y-web!9
No description provided.