Skip to content

feat: CrawlProof ad unit on smshub.dev public pages - #99

Merged
ralyodio merged 1 commit into
masterfrom
feat/crawlproof-ads
Oct 19, 2026
Merged

ralyodio merged 1 commit into
masterfrom
feat/crawlproof-ads

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Adds one CrawlProof ad unit (slot 97061bef-7275-45db-a9e4-40c3fa1b59b9) above the footer on smshub.dev public pages only.

  • src/lib/ads.ts: slot id, public-page allowlist, bounded crawlproofAds.scan() retry
  • src/components/ad-unit.tsx: one unit, format from viewport (728x90 / 300x250), slot set on mount
  • layout.tsx: ad.js tag next to the existing stats.js, unit in the smshub branch only (brand hosts untouched)
  • globals.css: collapse-until-filled
  • CSP: frame-src 'self' https://crawlproof.com
  • alerts.test.ts: the dedupe test's pinned clock (2026-10-17) broke once the real date passed it, since FakeDb stamps created_at with Date.now(); the clock now starts from the real time.

🤖 Generated with Claude Code

One viewport-picked banner (728x90 desktop, 300x250 mobile) above the footer
on /, /docs/*, /privacy, /terms, /sms, /install, /phonenumbers and
/verification-numbers. Slot set in a mount effect then ad.js scan(), collapsed
until filled. Brand hosts use their own layout and never render it; app, auth
and checkout pages are excluded. CSP gains frame-src https://crawlproof.com.

Also unpins the alerts dedupe test clock: FakeDb stamps created_at with the
real time, so the pinned 2026-10-17 clock failed once the date moved on.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

10 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 2 | LOW: 6

Severity Rule Location
HIGH sh-unquoted-expansion-destructive public/install.sh:67
HIGH sh-remote-script-execution public/install.sh:89
MEDIUM sh-remote-script-execution public/install.sh:133
MEDIUM js-open-redirect src/app/numbers/page.tsx:182
LOW secret-generic-credential src/lib/providers/__tests__/twilio.test.ts:24
LOW secret-generic-credential src/lib/providers/__tests__/twilio.test.ts:46
LOW secret-generic-credential src/lib/providers/__tests__/twilio.test.ts:60
LOW secret-generic-credential src/lib/providers/__tests__/twilio.test.ts:78
LOW secret-generic-credential supabase/config.toml:287
LOW secret-generic-credential supabase/config.toml:319

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit def3b52 into master Oct 19, 2026
12 checks passed
@ralyodio
ralyodio deleted the feat/crawlproof-ads branch October 19, 2026 07:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant