banyaro/backend/static/js/pages
rene 1ff66a7083 Sicherheit + Tests + A11y, SW by-v1118
PYDANTIC max_length (38 Routen, ~400 Field-Constraints):
Schützt vor DoS durch Riesen-Payloads (10MB Thread-Titel etc.).
Pragmatische Limits:
- Titel/Name: 200 · Beschreibung/Body: 10000 · Notiz: 5000
- Email: 254 (RFC 5321) · URL: 500 · Slug/Kategorie: 100
- Hund-Name/Rasse: 80 · Hund-Bio: 2000

Top-betroffen: forum.py, diary.py, health.py, dogs.py, expenses.py,
notes.py, auth.py, profile.py. Manuelle len()-Checks in profile,
chat, ki entfernt (jetzt durch Field abgedeckt).

PYTEST COVERAGE (+19 Tests, 37 grün + 1 xfail):
- test_security.py: require_owner (Places GET/PATCH/DELETE mit
  Fremduser → 403), JWT-Blacklist (Logout invalidiert Token),
  Login-Lockout (5 Fehlversuche → 429 + Retry-After Header)
- test_race.py: Invoice-Counter (20 parallele Threads, alle unique),
  Founder-Number (atomare Vergabe, voll bei 100)
- test_validation.py: Forum-Titel 30k Zeichen → 422, Diary-Text
  50k → 422 (verifiziert Pydantic max_length-Sweep)

A11Y (Tap-Targets ≥44×44 + Dark-Mode-Kontrast):
- #header-user-btn 36→44px, .header-back 40→44, .header-menu-btn 40→44
- dog-profile Wrapped-Slider Prev/Next 40→44
- forum-Lightbox Close 40→44
- --c-text-muted Light: #B0A090 (2.37:1 FAIL) → #7F6B58 (4.74:1 PASS)
- --c-text-muted Dark:  #806A58 (3.58:1 FAIL) → #A08878 (5.46:1 PASS)
- Branding-Farben unangetastet
2026-05-27 13:40:30 +02:00
..
admin.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
adoption.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
agb.js Rechtliche Seiten überarbeitet: Impressum, Datenschutz, AGB 2026-05-15 16:41:19 +02:00
breeder-editor.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
breeder.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
chat.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
datenschutz.js Big Sweep: Security + Race-Conditions + Tests + DSGVO + A11y, SW by-v1095 2026-05-26 20:12:01 +02:00
diary.js Design-System Sprint A: utilities.css + 948 Inline-Styles → Utility-Klassen, SW by-v1102 2026-05-27 07:11:27 +02:00
dog-profile.js Sicherheit + Tests + A11y, SW by-v1118 2026-05-27 13:40:30 +02:00
ernaehrung.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
erste-hilfe.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
events.js Sprint D: Karten-Familie auf UI.map.create+svgMarker konsolidiert, SW by-v1107 2026-05-27 08:17:06 +02:00
expenses.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
forum.js Sicherheit + Tests + A11y, SW by-v1118 2026-05-27 13:40:30 +02:00
friends.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
gruender.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
health.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
hilfe.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
impressum.js Design-System Sprint A: utilities.css + 948 Inline-Styles → Utility-Klassen, SW by-v1102 2026-05-27 07:11:27 +02:00
jobs.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
knigge.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
laeufi.js Design-System Sprint A: utilities.css + 948 Inline-Styles → Utility-Klassen, SW by-v1102 2026-05-27 07:11:27 +02:00
litters.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
lost.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
map.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
moderation.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
movies.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
notes.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
notifications.js Feature+Fix: Referral-Admin, Pro-Gates, Karten-Layer, onDogChange, Staging-Media (SW by-v855) 2026-05-11 17:23:29 +02:00
onboarding.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
partner-profil.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
partner.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
personality.js Design-System Sprint A: utilities.css + 948 Inline-Styles → Utility-Klassen, SW by-v1102 2026-05-27 07:11:27 +02:00
places.js Design-System Sprint A: utilities.css + 948 Inline-Styles → Utility-Klassen, SW by-v1102 2026-05-27 07:11:27 +02:00
playdate.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
poison.js Sprint D: Karten-Familie auf UI.map.create+svgMarker konsolidiert, SW by-v1107 2026-05-27 08:17:06 +02:00
recalls.js Fix: Recalls leerer State check-circle via UI.icon(), SW by-v602 2026-05-02 10:33:25 +02:00
reise.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
routes.js Sprint D: Karten-Familie auf UI.map.create+svgMarker konsolidiert, SW by-v1107 2026-05-27 08:17:06 +02:00
settings.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
sitting.js Design-System Sprint A: utilities.css + 948 Inline-Styles → Utility-Klassen, SW by-v1102 2026-05-27 07:11:27 +02:00
social.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
trainingsplaene.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
uebungen.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
walks.js Sprint D: Karten-Familie auf UI.map.create+svgMarker konsolidiert, SW by-v1107 2026-05-27 08:17:06 +02:00
welcome.js Design-System Sprint A: utilities.css + 948 Inline-Styles → Utility-Klassen, SW by-v1102 2026-05-27 07:11:27 +02:00
wetter.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
widget.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
wiki.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
wurfboerse.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
zucht-profil.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00
zuchthunde.js Refactor: 1167 _esc() → UI.escape() in 36 Dateien, SW by-v1113 2026-05-27 10:15:33 +02:00