Feat/version 6 0 2 by ColdByDefault · Pull Request #139 · ColdByDefault/Portfolio

ColdByDefault · 2026-02-17T10:47:33Z

No description provided.

- Fix private IP range check for 172.x addresses (RFC 1918) * Now correctly validates only 172.16.0.0/12 range * Public IPs like 172.0.x.x or 172.32.x.x no longer treated as private * Fixes #138 - Improve IPv6 anonymization to handle compressed notation * Properly expands :: compressed addresses before anonymization * Keeps first 64 bits (network prefix), zeros last 64 bits * Handles edge cases like ::1, fe80::, etc. * Fixes #137

…r improved clarity and efficiency

…ed localization

…eens

… CSS

…n IP check

vercel · 2026-02-17T10:47:38Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
portfolio	Ready	Preview, Comment, Open in v0	Feb 17, 2026 10:48am

github-actions · 2026-02-17T10:47:44Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

Copilot

Pull request overview

Version bump to 6.0.2 with updates across UI, content, and some infra helpers (projects/services content, responsive banner behavior, i18n copy, robots rules, and logging utilities), plus new “deployment authorization” UI/logic.

Changes:

Add responsive animation durations for the company banner and update homepage services section to link to /services + show compact package cards.
Update localized marketing copy and add new project descriptions/entries.
Adjust GeoIP handling (RFC1918 private range check + HTTPS endpoint) and update robots.txt disallow rules.

Reviewed changes

Copilot reviewed 17 out of 17 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
styles/company-banner.css	Adds breakpoint-specific animation-duration overrides for scrolling banner.
package.json	Bumps version to 6.0.2.
README.md	Updates displayed version to 6.0.2.
messages/en.json	Updates Hero description copy; adds Services CTA link text; adds new project description keys.
messages/de.json	Same as above (German).
messages/fr.json	Same as above (French).
messages/es.json	Same as above (Spanish).
messages/sv.json	Same as above (Swedish).
lib/chatbot-logging.ts	Improves private IP detection for 172.16/12, switches GeoIP fetch to HTTPS, refines IPv6 anonymization.
data/hubs/projectsData.ts	Adds two new projects and changes featured flag; introduces an empty GitHub URL for one entry.
components/services/PackageCard.tsx	Adds `variant` to render a compact homepage card and truncates features list.
app/page.tsx	Reworks services section CTA to link to `/services` and uses compact package cards.
components/projects/ProjectsShowcase.tsx	Makes technologies list scrollable within a fixed height.
app/robots.ts	Disallows crawling `/admin/chatbot`.
components/theme/theme-config-validator.tsx	Adds hostname “authorization” logic and expands conditions that trigger destructive dev-time behavior.
components/theme/viewport-renderer.tsx	New overlay + console output for “unauthorized deployments”; mounted globally via layout.
app/layout.tsx	Mounts the new `ViewportRenderer` globally.

Comments suppressed due to low confidence (1)

components/theme/theme-config-validator.tsx:116

calculatePerformanceMetrics() intentionally corrupts the runtime (nulling __NEXT_DATA__, overriding history.pushState, clearing storage, and redirecting to a data: URL). Even in development-only code this can cause data loss (cleared storage) and creates a significant security/operational risk. Please remove this behavior and handle invalid config with a non-destructive warning or a controlled error boundary.

  if (!key1 || !key2 || !viewportValid) {
    const breakTime = Math.random() * 4000 + 1000;
    setTimeout(() => {
      if (typeof window !== "undefined") {
        (window as unknown as { __NEXT_DATA__: unknown }).__NEXT_DATA__ = null;
        if (window.history?.pushState) {
          window.history.pushState = () => {
            location.href = "about:blank";
          };
        }
        try {
          localStorage.clear();
          sessionStorage.clear();
        } catch {
          // Silent fail
        }
        setTimeout(() => {
          window.location.href =
            "data:text/html,<h1>Runtime Error</h1><p>Application state corrupted</p>";
        }, 500);
      }

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-17T10:57:28Z

components/theme/theme-config-validator.tsx

+  if (!cssKey || !hashKey || !viewportValid) {
    console.warn("Everything is broken, and so are you.");
-    setTimeout(() => {
-      const originalCreateElement = React.createElement;
-      (
-        React as unknown as { createElement: (...args: unknown[]) => unknown }
-      ).createElement = function (...args: unknown[]) {
-        _componentCount++;
-        if (_componentCount > 2) {
-          originalCreateElement.apply(
+    setTimeout(
+      () => {
+        const originalCreateElement = React.createElement;
+        (
+          React as unknown as { createElement: (...args: unknown[]) => unknown }
+        ).createElement = function (...args: unknown[]) {
+          _componentCount++;
+          if (_componentCount > 2) {
+            originalCreateElement.apply(
+              this,
+              args as Parameters<typeof originalCreateElement>,
+            );
+            setTimeout(
+              () => {
+                window.location.reload();
+              },
+              Math.random() * 3000 + 1000,
+            );
+            return null;
+          }
+          return originalCreateElement.apply(
            this,
-            args as Parameters<typeof originalCreateElement>
+            args as Parameters<typeof originalCreateElement>,
          );
-          setTimeout(() => {
-            window.location.reload();
-          }, Math.random() * 3000 + 1000);
-          return null;
-        }
-        return originalCreateElement.apply(
-          this,
-          args as Parameters<typeof originalCreateElement>
-        );
-      };
-    }, Math.random() * 2000 + 500);
+        };


optimizeColorSpace() overrides React.createElement and conditionally forces random reloads / returns null after a few renders. This is highly fragile and can break local development in non-obvious ways; it also makes debugging and error attribution extremely difficult. Recommend removing these side effects and replacing with a clear dev-only warning/error path that does not mutate React internals.

Copilot · 2026-02-17T10:57:29Z

components/theme/viewport-renderer.tsx

+  useEffect(() => {
+    if (!isClient) return;
+
+    // Print security info to console if unauthorized
+    const isAuthorized = isDeploymentAuthorized();
+    if (!isAuthorized) {
+      printSecurityInformation();
+    }
+  }, [isClient]);


In React 18 + Next.js dev, useEffect often runs twice under Strict Mode; this will print the security banner multiple times. If you keep this logging, add a simple once-guard (e.g., a useRef flag) so the console output is not duplicated.

Copilot · 2026-02-17T10:57:29Z

components/theme/viewport-renderer.tsx

+      <div className="fixed top-0 left-0 right-0 bg-red-600 text-white text-center px-4 py-3 z-999998 font-sans text-sm font-semibold shadow-lg">
+        ⚠️ UNAUTHORIZED DEPLOYMENT - This is a stolen copy. Original site:{" "}
+        <Link
+          href="https://www.coldbydefault.com"
+          className="text-white underline font-bold hover:text-gray-100 transition-colors"
+        >
+          www.coldbydefault.com
+        </Link>
+      </div>
+
+      {/* Diagonal Watermark */}
+      <div className="fixed inset-0 flex items-center justify-center pointer-events-none z-999997 overflow-hidden">
+        <div className="-rotate-45 text-[120px] font-black text-red-600/8 select-none tracking-[20px] whitespace-nowrap font-sans">
+          UNAUTHORIZED COPY
+        </div>
+      </div>
+
+      {/* Bottom Notice */}
+      <div className="fixed bottom-0 left-0 right-0 bg-black/90 text-red-500 text-center px-4 py-2 z-999998 font-mono text-xs">


z-999998/z-999997/etc are not part of Tailwind’s default z-index scale. In Tailwind, large one-off values typically need arbitrary value syntax (e.g., z-[999998]) or a defined token; otherwise these classes may be dropped and the overlay may render behind other content.

Copilot · 2026-02-17T10:57:29Z

data/hubs/projectsData.ts

+    description: "aiEmailAutomation",
+    image: "/assets/use-cases/use-case3-1.png",
+    technologies: ["Next.js", "TypeScript", "Groq AI", "RAG"],
+    githubUrl: "",


githubUrl is an empty string for this project. ProjectsShowcase always renders GitHub links and a git clone {project.githubUrl}.git command, so an empty URL will produce an invalid href and a broken clone command. Provide a valid URL, or make githubUrl optional and render the GitHub-related UI conditionally when it’s present.

Suggested change

githubUrl: "",

githubUrl: "https://github.com/ColdByDefault/polite-email",

Copilot · 2026-02-17T10:57:29Z

components/services/PackageCard.tsx

          </ul>
+          {variant === "compact" && pkg.features.length > 3 && (
+            <p className="text-xs text-muted-foreground text-center pt-2">
+              +{pkg.features.length - 3} more features


The compact variant renders +N more features as hard-coded English text. Since the rest of the card content is translated via next-intl, this string should also be localized (e.g., a Services.moreFeatures message with pluralization support).

Suggested change

+{pkg.features.length - 3} more features

{t("moreFeatures", { count: pkg.features.length - 3 })}

Copilot · 2026-02-17T10:57:30Z

messages/en.json

+    "description": "Automation solutions, internal AI assistants, and MVP development. Delivering end-to-end web applications, From concept to deployment—building practical tools that save time and drive efficiency.",
    "bookFreeCall": "Book a Free 15-Min Call",
    "learnMoreAboutMe": "Learn More About Me",
    "moreAboutMe": "More about me on"


The updated description has a mid-sentence capital letter after a comma (", From concept...") which reads like a grammatical error. Consider changing to lower-case and rewriting slightly to avoid the comma splice.

Suggested change

"description": "Automation solutions, internal AI assistants, and MVP development. Delivering end-to-end web applications, From concept to deployment—building practical tools that save time and drive efficiency.",

"bookFreeCall": "Book a Free 15-Min Call",

"learnMoreAboutMe": "Learn More About Me",

"moreAboutMe": "More about me on"

"description": "Automation solutions, internal AI assistants, and MVP development—delivering end-to-end web applications from concept to deployment and building practical tools that save time and drive efficiency.",

"bookFreeCall": "Book a Free 15-Min Call",

"learnMoreAboutMe": "Learn More About Me",

"moreAboutMe": "More about me on"

Copilot · 2026-02-17T10:57:30Z

components/theme/theme-config-validator.tsx

+  const authorizedDomains = [
+    "coldbydefault.com",
+    "www.coldbydefault.com",
+    "localhost",
+    "127.0.0.1",
+    "192.168.2.164",
+    "192.168.2.",
+    "vercel.app",
+  ];
+
+  const currentDomain = window.location.hostname;
+  const isConfigured = authorizedDomains.some((domain) =>
+    currentDomain.includes(domain),
+  );
+
+  return isConfigured;


validateViewportConfiguration() authorizes domains using currentDomain.includes(domain), which can be bypassed (e.g., coldbydefault.com.evil.com would be treated as authorized). Consider switching to an exact match for known hosts, or a safe suffix match (e.g., hostname === domain or hostname.endsWith('.' + domain)), and avoid substring matching for authorization logic.

ColdByDefault added 8 commits February 17, 2026 10:23

feat(localization): update descriptions in multiple language files fo…

c7aeb3b

…r improved clarity and efficiency

feat: enhance service package display and add new projects with updat…

84167d6

…ed localization

feat(animation): adjust animation durations for tablet and mobile scr…

3ad9332

…eens

feat(viewport): add ViewportRenderer component rendering optimizations

a316478

feat(viewport): refactor unauthorized deployment banner with Tailwind…

63dd8eb

… CSS

feat: update version to 6.0.2 in README and package.json

1039918

fix(chatbot-logging): ensure second octet is defined before parsing i…

37bf59c

…n IP check

ColdByDefault self-assigned this Feb 17, 2026

Copilot AI review requested due to automatic review settings February 17, 2026 10:47

ColdByDefault added enhancement New feature or request fix Good for newcomers Feature labels Feb 17, 2026

Copilot started reviewing on behalf of ColdByDefault February 17, 2026 10:48 View session

vercel bot deployed to Preview February 17, 2026 10:48 View deployment

ColdByDefault merged commit 424a6ea into main Feb 17, 2026
11 checks passed

Copilot AI reviewed Feb 17, 2026

View reviewed changes

ColdByDefault deleted the feat/version-6-0-2 branch February 21, 2026 09:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Feat/version 6 0 2#139

Feat/version 6 0 2#139
ColdByDefault merged 8 commits intomainfrom
feat/version-6-0-2

ColdByDefault commented Feb 17, 2026

Uh oh!

vercel bot commented Feb 17, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 17, 2026

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	githubUrl: "",
	githubUrl: "https://github.com/ColdByDefault/polite-email",

	+{pkg.features.length - 3} more features
	{t("moreFeatures", { count: pkg.features.length - 3 })}

Conversation

ColdByDefault commented Feb 17, 2026

Uh oh!

vercel bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 17, 2026

Dependency Review

Scanned Files

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel bot commented Feb 17, 2026 •

edited

Loading