pediatric-ai-scribe-v3

danvics/pediatric-ai-scribe-v3

Fork 0

Commit graph

Author	SHA1	Message	Date
Daniel Onyejesi	82a0911d24	Dedicated CMS page, responsive email templates, security fixes in auth - New dedicated Content Manager tab (WordPress-like layout) with: - Stats dashboard (published, drafts, categories, quizzes, attempts) - Sidebar with category tree and filter controls (status, category) - Table-style content list with search - Full-page editor with title bar, meta fields, body editor, quiz builder - Content Manager visible only for admin and moderator roles in sidebar - Removed CMS from admin panel (admin panel is admin-only again) - Email templates: fully responsive with max-width, proper mobile breakpoints, table-based layout for Outlook/Gmail compatibility, no overflow - Security: escape all user data in emails with escHtml(), escape APP_URL in verify-email HTML, replace raw err.message with generic errors in auth - Security: email body from admin settings now HTML-escaped before rendering	2026-03-23 20:13:22 -04:00
Daniel Onyejesi	0327afe94c	Fix quiz SQL bug, security hardening, componentize HTML, speed improvements - Fix: "missing FROM-clause entry for table q" in quiz submission query - Security: replace broken sanitizeHtml with allowlist-based sanitizer (prevents stored XSS) - Security: whitelist table names in uniqueSlug() to prevent SQL injection pattern - Security: replace raw err.message responses with generic errors in learning routes - Security: cap admin logs query LIMIT to 500 - Refactor: break 1685-line index.html into 12 lazy-loaded component files (280 lines shell) - Speed: add preconnect hints for Google Fonts and CDN - Speed: defer all script tags for faster initial paint - Speed: lazy-load tab HTML on activation (only active tab's DOM is parsed) - Update: replace HIPAA notice with institution-guidelines cautionary note	2026-03-23 20:01:54 -04:00
Daniel Onyejesi	c6cc9ece71	v3.1: Add Learning Hub with CMS, quizzes, and 3-role user system - New Learning Hub under Pediatric menu with content feed, category browsing, search, content viewer, and interactive quizzes (MCQ, true/false) - Quiz system with per-option wrong-answer explanations and general explanations - Admin CMS for creating/editing categories, content (articles, pearls, quizzes), and inline question builder with answer options - 3-role system: admin (full access), moderator (can manage Learning Hub content), user (all clinical features + learning hub read access) - 5 new database tables: learning_categories, learning_content, learning_questions, learning_options, learning_progress - User progress tracking with score history per quiz - Moderators see "Content Manager" tab instead of full Admin panel	2026-03-23 19:32:47 -04:00

Author

SHA1

Message

Date

Daniel Onyejesi

82a0911d24

Dedicated CMS page, responsive email templates, security fixes in auth

- New dedicated Content Manager tab (WordPress-like layout) with:
  - Stats dashboard (published, drafts, categories, quizzes, attempts)
  - Sidebar with category tree and filter controls (status, category)
  - Table-style content list with search
  - Full-page editor with title bar, meta fields, body editor, quiz builder
- Content Manager visible only for admin and moderator roles in sidebar
- Removed CMS from admin panel (admin panel is admin-only again)
- Email templates: fully responsive with max-width, proper mobile breakpoints,
  table-based layout for Outlook/Gmail compatibility, no overflow
- Security: escape all user data in emails with escHtml(), escape APP_URL
  in verify-email HTML, replace raw err.message with generic errors in auth
- Security: email body from admin settings now HTML-escaped before rendering

2026-03-23 20:13:22 -04:00

Daniel Onyejesi

0327afe94c

Fix quiz SQL bug, security hardening, componentize HTML, speed improvements

- Fix: "missing FROM-clause entry for table q" in quiz submission query
- Security: replace broken sanitizeHtml with allowlist-based sanitizer (prevents stored XSS)
- Security: whitelist table names in uniqueSlug() to prevent SQL injection pattern
- Security: replace raw err.message responses with generic errors in learning routes
- Security: cap admin logs query LIMIT to 500
- Refactor: break 1685-line index.html into 12 lazy-loaded component files (280 lines shell)
- Speed: add preconnect hints for Google Fonts and CDN
- Speed: defer all script tags for faster initial paint
- Speed: lazy-load tab HTML on activation (only active tab's DOM is parsed)
- Update: replace HIPAA notice with institution-guidelines cautionary note

2026-03-23 20:01:54 -04:00

Daniel Onyejesi

c6cc9ece71

v3.1: Add Learning Hub with CMS, quizzes, and 3-role user system

- New Learning Hub under Pediatric menu with content feed, category browsing,
  search, content viewer, and interactive quizzes (MCQ, true/false)
- Quiz system with per-option wrong-answer explanations and general explanations
- Admin CMS for creating/editing categories, content (articles, pearls, quizzes),
  and inline question builder with answer options
- 3-role system: admin (full access), moderator (can manage Learning Hub content),
  user (all clinical features + learning hub read access)
- 5 new database tables: learning_categories, learning_content, learning_questions,
  learning_options, learning_progress
- User progress tracking with score history per quiz
- Moderators see "Content Manager" tab instead of full Admin panel

2026-03-23 19:32:47 -04:00

3 commits