Merge fix/client-id-insecure-context for client-side ids

This commit is contained in:
Grovy311 2026-09-26 14:22:35 +02:00
commit 80dbc73230
4 changed files with 84 additions and 4 deletions

View file

@ -177,6 +177,13 @@ The circuit list editor must remain a custom spreadsheet-like component with con
Avoid permanent Bootstrap form controls inside table cells. Table cells should show static text by default and switch to inputs only while editing.
## Browser Runtime
The web UI is also opened over plain HTTP from other machines in the LAN, which
is not a secure context. Do not call secure-context-only browser APIs such as
`crypto.randomUUID()` directly; create client-side ids with `createClientId()`
from `src/frontend/utils/client-id.ts`.
## Drag-and-Drop Rules
Dragging from the circuit identifier / circuit handle moves the whole circuit.