rene/banyaro
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix: Freunde Annehmen/Ablehnen/Chat per Event-Delegation statt Inline-onclick (von CSP-Härtung 65cfa25 blockiert), SW v1163

Browse source
This commit is contained in:
rene 2026-06-04 13:35:53 +02:00
parent 55b354e865
commit 152fde716c
6 changed files with 35 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

2
VERSION
View file

@ -1 +1 @@
1162
1163

24
backend/static/index.html
View file

@ -86,14 +86,14 @@
<title>Ban Yaro</title>
<!-- Theme + theme-color Statusleiste vor CSS setzen -->
<script src="/js/boot-early.js?v=1162"></script>
<script src="/js/boot-early.js?v=1163"></script>
<!-- CSS: Reihenfolge ist wichtig — ?v= zwingt Browser zur Neuladung -->
<link rel="stylesheet" href="/css/design-system.css?v=1162">
<link rel="stylesheet" href="/css/layout.css?v=1162">
<link rel="stylesheet" href="/css/components.css?v=1162">
<link rel="stylesheet" href="/css/utilities.css?v=1162">
<link rel="stylesheet" href="/css/lists.css?v=1162">
<link rel="stylesheet" href="/css/design-system.css?v=1163">
<link rel="stylesheet" href="/css/layout.css?v=1163">
<link rel="stylesheet" href="/css/components.css?v=1163">
<link rel="stylesheet" href="/css/utilities.css?v=1163">
<link rel="stylesheet" href="/css/lists.css?v=1163">
</head>
<body>
@ -617,11 +617,11 @@
<div id="modal-container"></div>
<!-- JS: Reihenfolge ist wichtig — erst Basis, dann Features -->
<script src="/js/api.js?v=1162"></script>
<script src="/js/ui.js?v=1162"></script>
<script src="/js/app.js?v=1162"></script>
<script src="/js/worlds.js?v=1162"></script>
<script src="/js/offline-indicator.js?v=1162"></script>
<script src="/js/api.js?v=1163"></script>
<script src="/js/ui.js?v=1163"></script>
<script src="/js/app.js?v=1163"></script>
<script src="/js/worlds.js?v=1163"></script>
<script src="/js/offline-indicator.js?v=1163"></script>
<!-- Feature-Seiten werden lazy geladen -->
@ -631,7 +631,7 @@
<!-- Boot: Offline-Banner + SW-Registration (extrahiert für CSP) -->
<script src="/js/boot.js?v=1162"></script>
<script src="/js/boot.js?v=1163"></script>
</body>

2
backend/static/js/app.js
View file

@ -3,7 +3,7 @@
Router, State-Management, Navigation, Initialisierung.
============================================================ */
const APP_VER = '1162'; // ← bei jedem Deploy mit Frontend-Änderungen erhöhen
const APP_VER = '1163'; // ← bei jedem Deploy mit Frontend-Änderungen erhöhen
const APP_VERSION = '1.6.0'; // ← semantische Version, wird bei make release gesetzt
window.APP_VER = APP_VER; // global verfügbar für andere Module (z.B. offline-indicator)
window.APP_VERSION = APP_VERSION;

23
backend/static/js/pages/friends.js
View file

@ -148,6 +148,21 @@ window.Page_friends = (() => {
_searchTimer = setTimeout(() => _doSearch(q), 380);
});
// Delegierter Click-Handler — robust auch unter strikter CSP / für
// dynamisch nachgerenderte Buttons (Anfragen, Freundesliste).
// Ersetzt Inline-onclick, das auf manchen iOS-PWA-Sessions nicht feuerte.
_container.addEventListener('click', e => {
const btn = e.target.closest('[data-fr-action]');
if (!btn) return;
const id = parseInt(btn.dataset.frId, 10);
switch (btn.dataset.frAction) {
case 'accept': _accept(id); break;
case 'decline': _decline(id); break;
case 'cancel': _cancel(id); break;
case 'chat': _openChat(id); break;
}
});
// Prefill aus URL-Parameter → sofort suchen
if (prefill && prefill.length >= 2) {
_doSearch(prefill);
@ -359,12 +374,12 @@ window.Page_friends = (() => {
</div>
<div style="display:flex;gap:var(--space-2);flex-shrink:0">
<button class="btn btn-primary btn-sm"
onclick="Page_friends._accept(${r.id})" title="Annehmen">
data-fr-action="accept" data-fr-id="${r.id}" title="Annehmen">
<svg class="ph-icon"><use href="/icons/phosphor.svg#check"></use></svg>
Annehmen
</button>
<button class="btn btn-ghost btn-sm"
onclick="Page_friends._decline(${r.id})" title="Ablehnen">
data-fr-action="decline" data-fr-id="${r.id}" title="Ablehnen">
<svg class="ph-icon"><use href="/icons/phosphor.svg#x"></use></svg>
Ablehnen
</button>
@ -402,7 +417,7 @@ window.Page_friends = (() => {
<div class="text-xs-muted">Anfrage ausstehend</div>
</div>
<button class="btn btn-ghost btn-sm"
onclick="Page_friends._cancel(${r.id})" title="Zurückziehen">
data-fr-action="cancel" data-fr-id="${r.id}" title="Zurückziehen">
<svg class="ph-icon"><use href="/icons/phosphor.svg#x"></use></svg>
</button>
</div>
@ -514,7 +529,7 @@ window.Page_friends = (() => {
<svg class="ph-icon"><use href="/icons/phosphor.svg#note-pencil"></use></svg>
</button>
<button class="btn btn-ghost btn-sm"
onclick="Page_friends._openChat(${f.friend_id})"
data-fr-action="chat" data-fr-id="${f.friend_id}"
title="Nachricht schreiben">
<svg class="ph-icon"><use href="/icons/phosphor.svg#chat-circle-dots"></use></svg>
</button>

2
backend/static/landing.html
View file

@ -4,7 +4,7 @@
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="color-scheme" content="light dark">
<script src="/js/landing-init.js?v=1162"></script>
<script src="/js/landing-init.js?v=1163"></script>
<title>Ban Yaro — Die Hunde-App für Deutschland, Österreich & Schweiz</title>
<meta name="description" content="Ban Yaro: Die kostenlose All-in-One Hunde-App für DACH. Tagebuch, Giftköder-Alarm, Training mit KI, Forum, Wurfbörse, Stammbaum, Inzucht-Check — DSGVO-konform, offline-fähig, ohne App Store.">
<meta name="keywords" content="Hunde App, Hunde Community, Wurfbörse, Züchter, Welpen kaufen, Stammbaum Hund, Inzuchtkoeffizient, Hundezucht, Impfpass Hund, Giftköder Alarm, Gassi Community, Hundetraining App, Hunde Forum, Hunde KI, Hundefilm Datenbank, Welpen Marktplatz">

2
backend/static/sw.js
View file

@ -4,7 +4,7 @@
============================================================ */
// ← EINZIGE Stelle für die Version — STATIC_ASSETS und CACHE_VERSION leiten sich ab
const VER = '1162';
const VER = '1163';
const CACHE_VERSION = `by-v${VER}`;
const CACHE_STATIC = `${CACHE_VERSION}-static`;
const CACHE_TILES = 'ban-yaro-tiles-v1'; // bleibt über SW-Updates erhalten