2 commits

Author	SHA1	Message	Date
Daniel Onyejesi	28464308ba	Dedicated CMS page, responsive email templates, security fixes in auth ... - New dedicated Content Manager tab (WordPress-like layout) with: - Stats dashboard (published, drafts, categories, quizzes, attempts) - Sidebar with category tree and filter controls (status, category) - Table-style content list with search - Full-page editor with title bar, meta fields, body editor, quiz builder - Content Manager visible only for admin and moderator roles in sidebar - Removed CMS from admin panel (admin panel is admin-only again) - Email templates: fully responsive with max-width, proper mobile breakpoints, table-based layout for Outlook/Gmail compatibility, no overflow - Security: escape all user data in emails with escHtml(), escape APP_URL in verify-email HTML, replace raw err.message with generic errors in auth - Security: email body from admin settings now HTML-escaped before rendering	2026-03-23 20:13:22 -04:00
Daniel Onyejesi	4064ccf516	Fix quiz SQL bug, security hardening, componentize HTML, speed improvements ... - Fix: "missing FROM-clause entry for table q" in quiz submission query - Security: replace broken sanitizeHtml with allowlist-based sanitizer (prevents stored XSS) - Security: whitelist table names in uniqueSlug() to prevent SQL injection pattern - Security: replace raw err.message responses with generic errors in learning routes - Security: cap admin logs query LIMIT to 500 - Refactor: break 1685-line index.html into 12 lazy-loaded component files (280 lines shell) - Speed: add preconnect hints for Google Fonts and CDN - Speed: defer all script tags for faster initial paint - Speed: lazy-load tab HTML on activation (only active tab's DOM is parsed) - Update: replace HIPAA notice with institution-guidelines cautionary note	2026-03-23 20:01:54 -04:00