Skip to content

feat: static one-pager replacement (security remediation)#8

Closed
patoo0x wants to merge 1 commit intomainfrom
feat/static-merchant-page
Closed

feat: static one-pager replacement (security remediation)#8
patoo0x wants to merge 1 commit intomainfrom
feat/static-merchant-page

Conversation

@patoo0x
Copy link
Copy Markdown

@patoo0x patoo0x commented Mar 30, 2026

Supabase RLS exposed 134 merchant signups. Retiring web form — all upgrades now in-app.

Files added: static-replacement/index.html (zero-backend one-pager, Flash branded), static-replacement/404.html
Removed: check_pending_notifications.yml (was pinging Supabase on schedule)

No Supabase refs, no API keys, no form submissions. Ready to push to gh-pages once in-app upgrade flow is verified end-to-end.

Context: Supabase RLS misconfiguration exposed 134 merchant signups
for ~10 months. Retiring web form — all upgrades now happen in-app.

Changes:
- static-replacement/index.html: zero-backend one-pager
  Flash branding (Sora + Inter, #41ad49), dark theme, no Supabase,
  no API keys, no form submissions. Includes hero, 3-tier cards
  (Personal/Pro/Merchant), step-by-step in-app upgrade instructions,
  FAQ, app store badges, support links. Mobile-responsive.
- static-replacement/404.html: catchall redirect to /
- .github/workflows/check_pending_notifications.yml: removed
  (pinged Supabase on schedule — no longer needed)
- .gitignore: added .env*.local and supabase/

Deploy: push static-replacement/* to gh-pages root, remove _next/*
Blocked on: in-app upgrade flow verification (gate before go-live)
@patoo0x
Copy link
Copy Markdown
Author

patoo0x commented Mar 31, 2026

Superseded by #9 — cleaner redesign by Lori. Closing.

@patoo0x patoo0x closed this Mar 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants