Skip to content

fix: Full site audit — 15 critical + important issues fixed#113

Merged
deepu0 merged 1 commit into
mainfrom
fix/full-site-audit
Jun 9, 2026
Merged

fix: Full site audit — 15 critical + important issues fixed#113
deepu0 merged 1 commit into
mainfrom
fix/full-site-audit

Conversation

@deepu0

@deepu0 deepu0 commented Jun 9, 2026

Copy link
Copy Markdown
Owner

Full Site Audit — 15 Issues Fixed

🔴 Critical

  1. Sitemap missing 431 experience pages — fall back to anon key when service role key unavailable at build time
  2. AdSense blocking render — changed strategy from beforeInteractive to lazyOnload
  3. Render-blocking Google Font — switched from link tag to next/font/google (self-hosted, zero FOUT)

🟡 Important

  1. force-dynamic + revalidate conflict — removed force-dynamic so ISR works
  2. Missing canonical URLs — added to 5 pages
  3. No custom 404/error pages — added not-found.tsx and error.tsx
  4. XSS risk — added HTML sanitizer for dangerouslySetInnerHTML
  5. Author typo — fixed siteConfig.author

🟢 Nice-to-have

9-13. Footer links, tags description, security headers, console.log cleanup, sitemap logging

No breaking changes

Critical:
- Sitemap: fall back to anon key when service role key unavailable (fixes 0 experience pages in sitemap)
- AdSense: change strategy from beforeInteractive to lazyOnload (unblocks rendering)
- Font: switch from Google Fonts <link> to next/font/google (eliminates render-blocking request)

Important:
- Remove force-dynamic conflicting with revalidate on companies/[company], companies/page, interview-experience/[slug]
- Add canonical URLs to companies/[company], companies listing, interview-experience listing, blog listing, tags
- Add custom not-found.tsx (404) and error.tsx pages with navigation
- Add HTML sanitizer for dangerouslySetInnerHTML on experience pages (XSS prevention)
- Fix siteConfig.author from 'Sharmag' to 'Deepak Sharma'

Nice-to-have:
- Fix footer: GitHub link (depaksharma -> deepu0), Twitter link (generic -> @frontendjunction)
- Fix tags page meta description from placeholder to proper SEO text
- Add security headers: X-Content-Type-Options, X-Frame-Options, X-DNS-Prefetch-Control, Referrer-Policy
- Remove console.log from production components (add-new-experience, session-provider)
- Sitemap: add error logging and increase experience limit to 1000
@vercel

vercel Bot commented Jun 9, 2026

Copy link
Copy Markdown

Someone is attempting to deploy this pull request to the deepu0's projects Team on Vercel.

No GitHub account was found matching the commit author email address.

To deploy this pull request, the commit author's email address needs to be associated with a GitHub account.

Learn more about how to change the commit author information.

@coderabbitai

coderabbitai Bot commented Jun 9, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@deepu0, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 5 minutes and 37 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Free

Run ID: 9e447eb6-ce87-42b6-9881-09b880dc1999

📥 Commits

Reviewing files that changed from the base of the PR and between c61fc81 and 69e2ac0.

📒 Files selected for processing (16)
  • app/blog/page.tsx
  • app/companies/[company]/page.tsx
  • app/companies/page.tsx
  • app/error.tsx
  • app/interview-experience/[slug]/page.tsx
  • app/interview-experience/page.tsx
  • app/layout.tsx
  • app/not-found.tsx
  • app/sitemap.ts
  • app/tags/page.tsx
  • components/add-new-experience.tsx
  • components/common/footer.tsx
  • components/session-provider.tsx
  • config/site.ts
  • lib/sanitize-html.ts
  • next.config.mjs

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Pro by visiting https://app.coderabbit.ai/login.

Comment @coderabbitai help to get the list of available commands and usage tips.

@deepu0 deepu0 merged commit 95a438f into main Jun 9, 2026
2 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant