Marc Mintel 99467f1379 fix(antispam): harden spam guard with signed form tokens and proxy-safe IP extraction ...

- Rate limit now uses the last X-Forwarded-For hop (appended by Traefik)
  instead of the client-controlled first hop, which bots rotated freely
- Time-trap anchored to server time via HMAC-signed form token
  (FORM_TOKEN_SECRET) instead of client-supplied form_loaded_at
- Fix RequestQuoteForm regression: FormData was built from scratch without
  honeypot/token hidden inputs and inputs lacked name attributes, so every
  legitimate quote request was silently blocked as spam

2026-09-02 10:06:07 +02:00

.agents

fix: resolve tailwind production container alignment & vitest swc plugins

2026-07-10 16:39:02 +02:00

.gitea/workflows

chore(ci): restore qa.yml target to test.e-tib.com

2026-07-09 11:46:10 +02:00

.pa11yci

fix(a11y): resolve color-contrast and link-in-text-block WCAG violations

2026-05-15 09:04:37 +02:00

.tmp_vikunja

fix(data): update project quantities and totals from data sources

2026-06-13 14:36:14 +02:00

.turbo-test

fix(pipeline): pass dynamic NPM_DOMAIN to docker build to prevent 404s, fix reference badge location cleaning, and enable glowing border on map

2026-05-18 11:58:35 +02:00

app

fix(antispam): harden spam guard with signed form tokens and proxy-safe IP extraction

2026-09-02 10:06:07 +02:00

assets

feat(legal): integrate RheinLand Betriebshaftpflichtversicherung

2026-08-02 20:40:16 +02:00

components

fix(antispam): harden spam guard with signed form tokens and proxy-safe IP extraction

2026-09-02 10:06:07 +02:00

content

fix(content): keep pipe diameter unchanged at 400er Rohr / 400mm pipe

2026-08-13 09:48:45 +02:00

data

fix(data): update project quantities and totals from data sources

2026-06-13 14:36:14 +02:00

docs

Initial commit: E-TIB production hardening & E2E foundation

2026-04-28 19:11:38 +02:00

i18n

feat: complete MDX migration, stabilize environment & verify via E2E tests

2026-05-03 18:46:41 +02:00

lib

fix(antispam): harden spam guard with signed form tokens and proxy-safe IP extraction

2026-09-02 10:06:07 +02:00

messages

chore: remove Prokuristin and regionales

2026-07-21 15:24:13 +02:00

patches

Initial commit: E-TIB production hardening & E2E foundation

2026-04-28 19:11:38 +02:00

public

feat(team): 3D carousel lightbox, mobile optimization and subtle E-TIB logo arcs

2026-08-12 15:43:53 +02:00

reference

chore: add www.nemo-gmbh.de site reference mirror

2026-05-15 10:08:49 +02:00

reports

fix: resolve lighthouse canonical and apple-touch-icon issues

2026-06-23 18:38:35 +02:00

scratch

fix(parity): update footer translations, certificate links, references CTA and trade fairs

2026-05-27 13:03:00 +02:00

scripts

fix(infra): replace legacy klz fallback references with etib across docker compose and test scripts

2026-08-17 18:31:29 +02:00

src/scripts

chore(observability): port Sentry and memory optimizations from klz-2026

2026-05-13 13:21:07 +02:00

styles

feat: overhaul competence pages, unify brand colors, and polish site integrity

2026-05-15 21:07:25 +02:00

tests

fix(antispam): harden spam guard with signed form tokens and proxy-safe IP extraction

2026-09-02 10:06:07 +02:00

venv

fix(referenzen): assign unique, matching images to all reference projects

2026-06-19 21:21:50 +02:00

.dockerignore

perf: add .dockerignore to optimize docker build context and speed up CI/CD

2026-05-12 12:14:54 +02:00

.env

fix: remove dashes from SENTRY_DSN to prevent Sentry SDK initialization failures

2026-07-19 20:56:53 +02:00

.env.example

fix(antispam): harden spam guard with signed form tokens and proxy-safe IP extraction

2026-09-02 10:06:07 +02:00

.env.production

fix: remove dashes from SENTRY_DSN to prevent Sentry SDK initialization failures

2026-07-19 20:56:53 +02:00

.gitignore

chore(gitignore): ignore .kilo local agent config and debug artifacts

2026-09-01 17:17:46 +02:00

.npmrc

feat(ui): add AnimatedGlossyBorder and refine industrial interactions

2026-05-13 10:23:47 +02:00

.npmrc.test

fix(config): ensure analytics URL has protocol to prevent build crash

2026-05-12 13:01:18 +02:00

after-login.png

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

badge.svg

content: rename Kabelleitungstiefbau to Kabelleitungsnetzbau

2026-06-19 19:00:33 +02:00

bundle-stats.json

chore: release 2.2.69 (PageSpeed optimizations)

2026-06-26 09:53:12 +02:00

commitlint.config.cjs

Initial commit: E-TIB production hardening & E2E foundation

2026-04-28 19:11:38 +02:00

contact_sheet.jpg

fix(referenzen): assign unique, matching images to all reference projects

2026-06-19 21:21:50 +02:00

contact-page-auth-debug.html

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

contact-page-debug.html

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

contact.png

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

danny_mail_draft.txt

feat(ui): add dedicated certificates pages and block component

2026-05-15 09:38:42 +02:00

docker-compose.dev.yml

fix(infra): replace legacy klz fallback references with etib across docker compose and test scripts

2026-08-17 18:31:29 +02:00

docker-compose.yml

fix(infra): replace legacy klz fallback references with etib across docker compose and test scripts

2026-08-17 18:31:29 +02:00

Dockerfile

fix: include tgz files in docker build context for local package installation

2026-06-19 15:30:03 +02:00

Dockerfile.dev

feat(team): 3D carousel lightbox, mobile optimization and subtle E-TIB logo arcs

2026-08-12 15:43:53 +02:00

dummy-polyfill.js

fix: resolve ssr:false build error for dynamic imports in Server Components

2026-06-25 15:03:51 +02:00

eslint.config.mjs

chore: fix eslint config whitespace issue in globals

2026-05-12 11:32:19 +02:00

INSTRUCTIONS.md

chore: add project instructions and workflow rules to INSTRUCTIONS.md

2026-06-15 16:08:23 +02:00

instrumentation-client.ts

fix: enforce deployment priorities and completely strip client sentry bundle

2026-06-25 22:32:14 +02:00

instrumentation.ts

chore(observability): port Sentry and memory optimizations from klz-2026

2026-05-13 13:21:07 +02:00

kabelhandbuch.txt

Initial commit: E-TIB production hardening & E2E foundation

2026-04-28 19:11:38 +02:00

lh-desktop.json

perf: revert InteractiveGermanyMap to dynamic import and use ReactDOM.preload for LCP

2026-06-29 10:19:44 +02:00

lh-report.json

perf: completely eliminate mobile lighthouse penalties via ssr: false map pins and 200px sizes

2026-06-29 10:42:04 +02:00

lh-single.json

fix(ui): use minmax for bento grid to prevent overflow

2026-06-22 22:35:43 +02:00

lh-standorte.json

perf: explicit 384px sizes to eliminate lighthouse image delivery penalties

2026-06-28 16:37:01 +02:00

lint-results.json

fix(lint): remove empty catch blocks causing pipeline failure

2026-07-23 18:22:32 +02:00

login-result.html

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

logs.txt

feat: complete MDX migration, stabilize routing and lead capture

2026-05-03 21:06:47 +02:00

lychee

fix: rename Bohrtechnik competence title, remove Kirchheilingen from standorte description, fix google maps lychee link

2026-06-14 23:05:51 +02:00

make_contact_sheet.py

fix(referenzen): assign unique, matching images to all reference projects

2026-06-19 21:21:50 +02:00

next.config.mjs

build: ruthlessly strip core-js polyfills to fix Lighthouse Legacy JS audit

2026-06-27 21:34:34 +02:00

optimize_videos.sh

feat(ui): finalize E-TIB modernization with footer redesign, video optimization, and TS fixes

2026-05-07 10:43:20 +02:00

package.json

fix(infra): replace legacy klz fallback references with etib across docker compose and test scripts

2026-08-17 18:31:29 +02:00

pnpm-lock.yaml

fix: resolve tailwind production container alignment & vitest swc plugins

2026-07-10 16:39:02 +02:00

postcss.config.cjs

Initial commit: E-TIB production hardening & E2E foundation

2026-04-28 19:11:38 +02:00

proxy.ts

fix(ci): update proxy matcher and traefik public router for image optimizer loopback

2026-08-17 18:22:45 +02:00

psi-standorte.json

perf: optimize Image component sizes and hoist LCP preload tags

2026-06-27 22:56:52 +02:00

run-lh.cjs

perf: revert InteractiveGermanyMap to dynamic import and use ReactDOM.preload for LCP

2026-06-29 10:19:44 +02:00

run-lh.js

perf: revert InteractiveGermanyMap to dynamic import and use ReactDOM.preload for LCP

2026-06-29 10:19:44 +02:00

runs.json

fix: rename Bohrtechnik competence title, remove Kirchheilingen from standorte description, fix google maps lychee link

2026-06-14 23:05:51 +02:00

sentry.edge.config.ts

chore(observability): port Sentry and memory optimizations from klz-2026

2026-05-13 13:21:07 +02:00

sentry.server.config.ts

chore(observability): port Sentry and memory optimizations from klz-2026

2026-05-13 13:21:07 +02:00

skip_branch_script.sh

fix: pipeline execution, deployment priority, and bundle optimizations

2026-06-25 22:08:26 +02:00

submission_logs.txt

feat: complete MDX migration, stabilize routing and lead capture

2026-05-03 21:06:47 +02:00

tailwind.config.cjs

fix: resolve tailwind production container alignment & vitest swc plugins

2026-07-10 16:39:02 +02:00

test-build-env.js

fix(pipeline): pass dynamic NPM_DOMAIN to docker build to prevent 404s, fix reference badge location cleaning, and enable glowing border on map

2026-05-18 11:58:35 +02:00

test-contact-auth.cjs

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

test-contact.cjs

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

test-contact.js

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

test-jq.sh

fix(ci): checkout repository in prepare job to fix priority-gate execution crash

2026-06-18 13:59:53 +02:00

test-login-error.cjs

fix: refactor standorte detail page layout to match standard mdx pages and fix bohrtechnik links

2026-06-15 11:26:09 +02:00

tsconfig.json

feat(ui): finalize E-TIB modernization with footer redesign, video optimization, and TS fixes

2026-05-07 10:43:20 +02:00

turbo.json

Initial commit: E-TIB production hardening & E2E foundation

2026-04-28 19:11:38 +02:00

vitest.config.mts

fix(test): remove isolate false to fix cross-file DOM leakage in CI

2026-07-10 18:23:06 +02:00

vitest.e2e.config.mts

Initial commit: E-TIB production hardening & E2E foundation

2026-04-28 19:11:38 +02:00

Description

No description provided

3.3 GiB

Releases 1

v2.4.60 — Anti-spam hardening Latest

2026-09-02 08:06:07 +00:00

Languages

PostScript 76.6%

TypeScript 20.8%

MDX 1.2%

JavaScript 0.8%

Shell 0.4%

Other 0.2%