Commit Graph

3 Commits

Author SHA1 Message Date
Claude
5cacfb19d0 🔒 Fix critical security vulnerabilities in social ads generator
SECURITY FIXES:
- Fix XSS vulnerability: Replace innerHTML with secure DOM manipulation
- Prevent information disclosure: Implement secure error handling with logging
- Add comprehensive server-side input validation with length limits
- Add missing @login_required decorator to main view
- Secure AI prompt generation with input sanitization and content filtering
- Add output validation for AI-generated content

TECHNICAL CHANGES:
- Replace dangerous innerHTML usage with secure createElement approach
- Add input validation for description (10-5000 chars), platform, and language
- Implement prompt injection protection and inappropriate content filtering
- Add comprehensive logging for debugging without exposing sensitive data
- Validate AI output for malicious patterns and content quality

These fixes address:
- CVE-like XSS vulnerability (CRITICAL)
- Information disclosure through error messages (HIGH)
- Input validation bypass (MEDIUM)
- Missing authorization controls (MEDIUM)
- Prompt injection risks (LOW)

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-25 15:24:41 +05:30
Claude
f40450851b Fix agent network errors and remove debug logging
- Fix social ads generator updateWalletBalance function call
- Fix weather reporter form submission URL and syntax errors
- Add missing status endpoints for polling functionality
- Remove debug logging from all agents
- Clean up button styling consistency

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-14 00:56:14 +05:30
Claude
f56708249d Add Job Posting Generator and Social Ads Generator agents
New features:
- Job Posting Generator (4.00 AED): Creates professional job postings with detailed requirements, company culture integration, and SEO optimization
- Social Ads Generator (7.00 AED): Creates compelling social media advertisements with platform-optimized copy and emoji support

Technical improvements:
- Individual agent architecture with namespaced templates
- Real-time AJAX form submission without page reload
- Wallet deduction only after successful processing
- Platform-specific optimization (job posting: 6 platforms, social ads: 6 platforms)
- Copy/download functionality for generated content
- Comprehensive form validation and error handling

Database changes:
- Job posting specific fields: job_title, company_name, seniority_level, contract_type, location, language
- Social ads specific fields: description, social_platform, include_emoji, language
- Response models with structured content fields

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-10 18:26:41 +05:30