Merge branch 'main' into pr-1099

Author: devanshi14malhotra

backend/app.py

@@ -4,6 +4,7 @@
 import sys
 import os
 sys.path.append(os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+sys.path.append(os.path.dirname(os.path.abspath(__file__)))
 
 from flask import Flask, request, jsonify, redirect, url_for
 from flask_cors import CORS
@@ -778,13 +779,6 @@ def _validate_jwt_secret_startup():
 
 _validate_jwt_secret_startup()
 
-@app.route('/api/v1/config', methods=['GET'])
-def get_config():
-    """Serve public configuration values like Google Books API Key."""
-    return jsonify({
-        "google_books_key": os.getenv('GOOGLE_BOOKS_API_KEY', ''),
-        "google_books_key_secondary": os.getenv('GOOGLE_BOOKS_API_KEY_SECONDARY', '')
-    })
 
 # =====================================================================
 # ENDPOINT: CSRF Token Retrieval

backend/sanitizer.py

@@ -11,9 +11,17 @@
 from markupsafe import escape
 from typing import Any, Dict, List, Optional, Union
 import bleach
+import unicodedata
+
+
 
 logger = logging.getLogger(__name__)
 
+def normalize_unicode(text: str) -> str:
+    """Strip homoglyph and invisible control characters."""
+    text = unicodedata.normalize("NFC", text)
+    return "".join(c for c in text if unicodedata.category(c) not in ("Cc", "Cf"))
+
 # Patterns for potential prompt injection or malicious commands
 PROMPT_INJECTION_PATTERNS = [
     r"(?i)ignore\s+all\s+previous\s+instructions",
@@ -72,6 +80,8 @@ def sanitize_string(text: Optional[str], max_len: int = 5000, strip_html: bool =
 
     # Convert to string
     text = str(text).strip()
+    text = normalize_unicode(text)
+
 
     if not text:
         return ""
@@ -115,8 +125,7 @@ def sanitize_string(text: Optional[str], max_len: int = 5000, strip_html: bool =
             strip=False  # Convert unknown tags to entities
         )
 
-    # Layer 3: Additional HTML escaping for extra safety
-    text = html.escape(text)
+    
 
     # Layer 4: Limit length
     if len(text) > max_len:
@@ -158,8 +167,7 @@ def sanitize_for_ai(text: Optional[str]) -> str:
         logger.warning(f"Possible prompt injection detected: {detected_patterns[:2]}")
         clean_text = f"[User Input - Content Flagged]: {clean_text}"
 
-    return clean_text
-
+    return f"<user_input>{clean_text}</user_input>"
 
 
 def sanitize_payload(data: Union[Dict, List, str, Any]) -> Any:
@@ -179,7 +187,7 @@ def sanitize_payload(data: Union[Dict, List, str, Any]) -> Any:
         Sanitized version of the payload
     """
     if isinstance(data, dict):
-        return {k: sanitize_payload(v) for k, v in data.items()}
+        return {sanitize_string(str(k)): sanitize_payload(v) for k, v in data.items()}    
     elif isinstance(data, list):
         return [sanitize_payload(i) for i in data]
     elif isinstance(data, str):

frontend/assets/sounds/Rain-and-storm.mp3

@@ -547,3 +547,158 @@ body {
     padding: 1rem;
   }
 }
+
+/* =========================
+   DARK MODE
+========================= */
+
+[data-theme="night"] {
+  --landing-bg: #111111;
+  --landing-surface: #1b1b1b;
+  --landing-surface-strong: #222222;
+  --landing-border: rgba(255,255,255,0.08);
+  --landing-shadow: 0 10px 30px rgba(0,0,0,0.5);
+  --landing-gold: #d4af37;
+  --landing-wood: #f5f5f5;
+  --landing-ink: #ffffff;
+  --landing-muted: #d1d5db;
+}
+
+/* BODY */
+
+[data-theme="night"] body {
+  background:
+    radial-gradient(circle at top left, rgba(212,175,55,0.08), transparent 24%),
+    radial-gradient(circle at top right, rgba(127,150,160,0.06), transparent 18%),
+    #111111;
+  color: #ffffff;
+}
+
+/* HEADER */
+
+[data-theme="night"] .landing-header {
+  background: rgba(20,20,20,0.9);
+  border: 1px solid rgba(255,255,255,0.06);
+}
+
+/* HERO CARDS */
+
+[data-theme="night"] .guide-hero-copy,
+[data-theme="night"] .guide-hero-aside,
+[data-theme="night"] .guide-section,
+[data-theme="night"] .guide-card,
+[data-theme="night"] .guide-list-item,
+[data-theme="night"] .guide-hero-stat,
+[data-theme="night"] .page-link-card {
+  background: #1c1c1c !important;
+  border: 1px solid rgba(255,255,255,0.08);
+  box-shadow: none;
+}
+
+/* TEXT */
+
+[data-theme="night"] h1,
+[data-theme="night"] h2,
+[data-theme="night"] h3,
+[data-theme="night"] strong,
+[data-theme="night"] p,
+[data-theme="night"] li,
+[data-theme="night"] span,
+[data-theme="night"] a {
+  color: #ffffff !important;
+}
+
+/* MUTED TEXT */
+
+[data-theme="night"] .guide-note,
+[data-theme="night"] .eyebrow-note,
+[data-theme="night"] .guide-hero-stat span,
+[data-theme="night"] .page-link-card span {
+  color: #d1d5db !important;
+}
+
+/* BUTTONS */
+
+[data-theme="night"] .btn-primary,
+[data-theme="night"] .btn-ghost,
+[data-theme="night"] .landing-icon-btn {
+  background: #222222;
+  color: white;
+  border: 1px solid rgba(255,255,255,0.08);
+}
+
+/* NAVBAR LINKS */
+
+[data-theme="night"] .landing-nav a {
+  color: #f3f4f6 !important;
+}
+
+[data-theme="night"] .landing-nav a:hover {
+  background: rgba(255,255,255,0.08);
+}
+
+/* TOC LINKS */
+
+[data-theme="night"] .toc a {
+  background: #222222;
+  color: white;
+  border: 1px solid rgba(255,255,255,0.08);
+}
+
+/* PAGE LINK ICON */
+
+[data-theme="night"] .page-link-card i {
+  background: rgba(255,255,255,0.08);
+  color: #ffffff;
+}
+
+/* BACK BUTTON */
+
+[data-theme="night"] #backToTop {
+  background: #222222;
+  color: white;
+}
+
+/* THEME TOGGLE */
+
+[data-theme="night"] #themeToggle {
+  background: #222222;
+  color: white;
+}
+
+/* MAIN TEXT */
+
+[data-theme="night"] h1,
+[data-theme="night"] h2,
+[data-theme="night"] h3,
+[data-theme="night"] p,
+[data-theme="night"] li {
+  color: #ffffff !important;
+}
+
+/* LINKS */
+
+[data-theme="night"] a {
+  color: #f5f5f5;
+}
+
+/* STRONG TEXT */
+
+[data-theme="night"] strong {
+  color: #ffffff;
+}
+
+/* BADGES / PILLS */
+
+[data-theme="night"] .eyebrow-pill,
+[data-theme="night"] .eyebrow-note,
+[data-theme="night"] .guide-note {
+  color: #111111 !important;
+  background: #f3f4f6 !important;
+}
+
+/* TOC BUTTONS */
+
+[data-theme="night"] .toc a {
+  color: #ffffff !important;
+}

frontend/assets/sounds/calm-ocean-waves.mp3

@@ -32,13 +32,38 @@ input {
     min-width: 44px;
 }
 
+.main-footer a {
+    min-height: 0;
+    min-width: 0;
+}
+
+.main-footer .footer-nav a,
+.main-footer .footer-legal a {
+    line-height: 1.35;
+}
+
+.main-footer .social-icons a {
+    min-height: 40px;
+    min-width: 40px;
+}
+
 @media (max-width: 768px) {
 
     button,
     a {
         min-height: 48px;
         min-width: 48px;
     }
+
+    .main-footer a {
+        min-height: 0;
+        min-width: 0;
+    }
+
+    .main-footer .social-icons a {
+        min-height: 40px;
+        min-width: 40px;
+    }
 }
 
 /* --- Extra Large Screens (1200px+) --- */
@@ -1135,4 +1160,4 @@ input {
     .sort-select {
         width: 100%;
     }
-}
+}