Skip to content

Add the pit.world global footer, trim the site footer - #313

Merged
ralyodio merged 1 commit into
masterfrom
pit-footer
Oct 19, 2026
Merged

ralyodio merged 1 commit into
masterfrom
pit-footer

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Adds the pit.world global footer (server-fetched from https://pit.world/snippets/footer.html?site=qrypt.chat, 1h cache, 3s timeout, renders nothing on any failure) as the last thing in <body>.

Trims the site footer from four columns (brand + tagline, Product / Company / Legal / Connect, plus the @profullstack/footer webring row) to one link row (Security, About, Blog, FAQ, Contact, Warrant Canary, Privacy, Terms, GitHub) and a copyright line with the Tor .onion link. Drops the tagline, social link list, Encryption Test and Premium.

CSP is only frame-ancestors; no change. Version 0.9.2.

🤖 Generated with Claude Code

Fetch https://pit.world/snippets/footer.html?site=qrypt.chat on the server
(1h revalidate, 3s timeout, renders nothing on failure) as the last thing
in <body>. Cut the four-column footer (brand + tagline, Product/Company/
Legal/Connect columns, @profullstack/footer webring row) down to one link
row and a copyright line; the Tor link stays as a short '.onion' link.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

14 finding(s)

MEDIUM: 10 | LOW: 4

Severity Rule Location
MEDIUM js-unescaped-html-sink src/app/blog/[slug]/page.jsx:38
MEDIUM js-unescaped-html-sink src/app/blog/[slug]/page.jsx:66
MEDIUM js-unescaped-html-sink src/app/faq/page.jsx:57
MEDIUM js-unescaped-html-sink src/app/layout.jsx:141
MEDIUM js-unescaped-html-sink src/app/layout.jsx:145
MEDIUM js-unescaped-html-sink src/app/page.jsx:47
MEDIUM redos-nested-quantifier src/lib/auth/dns-name.js:88
MEDIUM js-unescaped-html-sink src/lib/components/chat/MessageItem.jsx:85
MEDIUM js-unescaped-html-sink src/lib/components/chat/MessageItem.jsx:130
MEDIUM js-unescaped-html-sink src/lib/components/PitFooter.jsx:15
LOW secret-generic-credential src/app/api/auth/register-anon/route.test.js:32
LOW secret-jwt tests/debug-sms.js:10
LOW secret-generic-credential tests/private-key-import-export.test.js:252
LOW secret-generic-credential tests/private-key-import-export.test.js:264

Snippets are redacted; ThreatCrush never prints matched credential material.

if (!res.ok) return null;
const html = await res.text();
if (!html.includes('data-pit-footer')) return null;
return <div dangerouslySetInnerHTML={{ __html: html }} />;
@ralyodio
ralyodio merged commit b1f0010 into master Oct 19, 2026
11 checks passed
ralyodio added a commit that referenced this pull request Oct 19, 2026
The Profullstack webring row is being rolled out fleet-wide on purpose,
so #313 should not have dropped it. The trimmed links render through
@profullstack/footer again as the one footer row (with the Tor link just
above when set); the pit.world footer still follows it.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants