Skip to content

feat: ad.network unit + verification meta on the home page - #314

Merged
ralyodio merged 1 commit into
masterfrom
feat/ad-network-home
Oct 19, 2026
Merged

ralyodio merged 1 commit into
masterfrom
feat/ad-network-home

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Adds the ad.network publisher unit (slot db16349c…, claim LifRx90nnLMtBYAw) to qrypt.chat's home page, right after the hero.

  • Same approach as blog/BlogAd.jsx: a plain cross-origin crawlproof.com/api/ads/frame iframe, no ad.js, so no third-party JavaScript runs in the page. Wrapped in <aside data-ad-network data-cp-ad …>. Server-rendered, so it also works with JS off (Tor).
  • <meta name="ad.network" content="LifRx90nnLMtBYAw"> via metadata.other on the home page.
  • No CSP change needed (only frame-ancestors is set). stats.js already in the layout; /blog untouched.

vitest: 761 passed; 2 unrelated env errors (tests/cli/exit.test.js pipe-buffer size, backup-pin timeout).

🤖 Generated with Claude Code

A plain cross-origin crawlproof.com/api/ads/frame iframe after the hero (no
third-party JS, same as the blog's BlogAd), inside the tagged ad.network
<aside>, plus <meta name="ad.network"> in the home page metadata.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

13 finding(s)

MEDIUM: 9 | LOW: 4

Severity Rule Location
MEDIUM js-unescaped-html-sink src/app/blog/[slug]/page.jsx:38
MEDIUM js-unescaped-html-sink src/app/blog/[slug]/page.jsx:66
MEDIUM js-unescaped-html-sink src/app/faq/page.jsx:57
MEDIUM js-unescaped-html-sink src/app/layout.jsx:141
MEDIUM js-unescaped-html-sink src/app/layout.jsx:145
MEDIUM js-unescaped-html-sink src/app/page.jsx:49
MEDIUM redos-nested-quantifier src/lib/auth/dns-name.js:88
MEDIUM js-unescaped-html-sink src/lib/components/chat/MessageItem.jsx:85
MEDIUM js-unescaped-html-sink src/lib/components/chat/MessageItem.jsx:130
LOW secret-generic-credential src/app/api/auth/register-anon/route.test.js:32
LOW secret-jwt tests/debug-sms.js:10
LOW secret-generic-credential tests/private-key-import-export.test.js:252
LOW secret-generic-credential tests/private-key-import-export.test.js:264

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 7d1c1e9 into master Oct 19, 2026
12 of 13 checks passed
@ralyodio
ralyodio deleted the feat/ad-network-home branch October 19, 2026 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant