Skip to content

fix(html): guard TOC hash clicks against SPA router hijack - #22

Merged
villainscode merged 1 commit into
mainfrom
fix/html-toc-spa-guard
Jul 30, 2026
Merged

fix(html): guard TOC hash clicks against SPA router hijack#22
villainscode merged 1 commit into
mainfrom
fix/html-toc-spa-guard

Conversation

@villainscode

Copy link
Copy Markdown
Collaborator

무엇

HTML 목차의 앵커 해시 클릭이 SPA 라우터에 가로채져 발생하던 rehydrate TypeError 크래시를 방지했습니다.

변경 사항

  • docs/html/mcp-2026-07-28.html — 클릭 가드 스크립트 삽입
    • 라우터 자동 탐지 및 차단
    • 17개 TOC 앵커 Playwright 검증 통과
  • .claude/skills/html-toc/SKILL.md — 신규 스킬
    • HTML 목차 제작/수정 절차
    • SPA 가드 적용 방법
    • 자동화 브라우저 테스트 검증 프로세스

검증 결과

✓ 17/17 앵커 하이재킹 시뮬레이션 통과
✓ run-ai.kr 및 유사 SPA 환경에서 안전성 확인
✓ 일반 정적 호스팅에는 영향 없음

- Add click guard script to HTML TOC template (docs/html/mcp-2026-07-28.html)
  Prevents router from intercepting anchor #hash navigation, which caused
  rehydrate TypeError crash on run-ai.kr and similar SPA deployments
- Validate 17 TOC anchors with Playwright to confirm click safety
- New html-toc skill (.claude/skills/html-toc/SKILL.md):
  Document procedure for creating/editing HTML TOC, applying SPA guard,
  and verifying all links with automated browser tests
@gemini-code-assist

Copy link
Copy Markdown

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

@vercel

vercel Bot commented Jul 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
claude-code-ppt Ready Ready Preview Jul 30, 2026 10:50pm

@villainscode
villainscode merged commit 0a43285 into main Jul 30, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants