community.vyos.net.git/site, branch feature/T9082-codeql-onboardVyOS community website (mirror of https://github.com/vyos/community.vyos.net.git)
https://git.amelek.net/vyos/community.vyos.net.git/atom?h=feature%2FT9082-codeql-onboard2026-04-18T16:37:55+00:00Merge branch 'main' into production2026-04-18T16:37:55+00:00Yuriy Andamasovyuriy@vyos.io2026-04-18T16:37:55+00:00urn:sha1:707e29012b0481ddaf3167fb34d844f278faea77Address Copilot review: preconnect order + staging-gate cookies-policy script2026-04-18T10:09:09+00:00Yuriy Andamasovyuriy@vyos.io2026-04-18T10:09:09+00:00urn:sha1:eef784ac6a72a8223fe094f79c72d58d8d91a4d0
Two fixes flagged by the Copilot reviewer on #35:
1. Preconnect hints were appended to the end of <head> while the GTM
loader is prepended to the top, so GTM's async script creation
fired before the browser ever saw the preconnect tags — they
provided no benefit. Switches insert-preconnect-hints to
prepend_child and adds `after = "insert-google-tag-manager-head"`
so the widget runs after GTM and its prepend pushes GTM down to
position 1. Result: preconnects land at the top of <head>, ahead
of the GTM loader.
2. The Cookiebot cd.js script embedded directly in
site/legal/cookies-policy.md rendered on every profile, so a
staging visitor who hit /legal/cookies-policy/ would leak their
IP to consent.cookiebot.com. Replaces the inline <script> with a
<div id="cookie-declaration-placeholder"></div> and adds a new
insert-cookiebot-declaration widget (profile = "live", page =
"legal/cookies-policy.md") that replaces the placeholder with
the real script element only on live builds. Staging now emits
zero Cookiebot markup on the cookies-policy page.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Add cookies policy page with Cookiebot declaration embed (placeholder CBID)2026-04-17T12:56:29+00:00Yuriy Andamasovyuriy@vyos.io2026-04-17T12:56:29+00:00urn:sha1:481e89ef002dd440943ce0d36a88fc6a674b9161
Embeds Cookiebot's auto-generated cookie declaration table. The
declaration content is served by consent.cookiebot.com and rendered
at display time — this repo only holds the embed shim and intro copy.
The CBID is a <CBID> placeholder that MUST be substituted with the
real value before merging main into production. The PR body's
prerequisite checklist gates this.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Remove custom consent banner and direct GA4 loader2026-04-17T12:05:08+00:00Yuriy Andamasovyuriy@vyos.io2026-04-17T12:05:08+00:00urn:sha1:f9b86c4ce9966e9ad527c89b639552f111694fca
Deletes the hand-rolled "Allow Analytics" aside, its JavaScript, its
SCSS partial, and the unconditional gtag.js script. The replacement
consent UI (Cookiebot banner) is loaded by the new GTM-T5VQHRT
container; the custom banner is no longer needed and was also
ineffective (both GTM and gtag loaded before the user clicked anything).
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Add VyOS Stream 2026.032026-03-20T09:10:24+00:00Daniil Baturindaniil@baturin.org2026-03-20T08:58:27+00:00urn:sha1:f0f71fe8651e834491731c2aec76da5b5e9584c1Add VyOS Stream 2026.032026-03-20T08:58:27+00:00Daniil Baturindaniil@baturin.org2026-03-20T08:58:27+00:00urn:sha1:2f23480d6066686f3cf62d809392ca18da2407a6Merge branch 'main' into production2026-02-17T17:56:58+00:00Daniil Baturindaniil@baturin.org2026-02-17T17:56:58+00:00urn:sha1:637ead2e03d0d9957119dbe5c1cdceccaba04efbAdd Stream 2026.022026-02-17T17:42:41+00:00Daniil Baturindaniil@baturin.org2026-02-17T17:42:41+00:00urn:sha1:36c5f7c28d057cb6cc30add3132f74f8393d32f0cosmetic bug: Fix image allign2025-12-24T10:21:34+00:00Viacheslav Hletenkov.gletenko@vyos.io2025-11-25T22:40:35+00:00urn:sha1:58681f337ba7bab2aac63ca169dbc522d438258d
(cherry picked from commit e8107f90846c7256184983a42a0fc8a3f5f36c66)
cosmetic bug: Fix image allign2025-11-25T22:40:35+00:00Viacheslav Hletenkov.gletenko@vyos.io2025-11-25T22:40:35+00:00urn:sha1:e8107f90846c7256184983a42a0fc8a3f5f36c66