From e74f4887f24a01a27ed00234445f4579d4fd9af2 Mon Sep 17 00:00:00 2001
From: Aditya Sharma <adityaiit07@gmail.com>
Date: Mon, 17 Aug 2026 03:58:33 +0530
Subject: [PATCH] fix: restrict debug error overlay to localhost only

Guards the error/unhandledrejection listeners behind a localhost check
so the debug overlay with raw error details is not shown to production
visitors.

Fixes #1862
---
 src/templates/explore.html | 54 ++++++++++++++++++++------------------
 src/templates/index.html   | 54 ++++++++++++++++++++------------------
 2 files changed, 56 insertions(+), 52 deletions(-)

diff --git a/src/templates/explore.html b/src/templates/explore.html
index 3b2a4b7c..843c2574 100644
--- a/src/templates/explore.html
+++ b/src/templates/explore.html
@@ -9,32 +9,34 @@
   <title>DevPath — Find Projects Based On Your Skills</title>
   
   <script>
-    window.addEventListener('error', function(e) {
-      var errDiv = document.createElement('div');
-      errDiv.style.position = 'fixed';
-      errDiv.style.top = '0';
-      errDiv.style.left = '0';
-      errDiv.style.width = '100%';
-      errDiv.style.background = 'red';
-      errDiv.style.color = 'white';
-      errDiv.style.zIndex = '999999';
-      errDiv.style.padding = '20px';
-      errDiv.textContent = 'JS ERROR: ' + e.message + ' at ' + e.filename + ':' + e.lineno;
-      document.body.appendChild(errDiv);
-    });
-    window.addEventListener('unhandledrejection', function(e) {
-      var errDiv = document.createElement('div');
-      errDiv.style.position = 'fixed';
-      errDiv.style.top = '50px';
-      errDiv.style.left = '0';
-      errDiv.style.width = '100%';
-      errDiv.style.background = 'orange';
-      errDiv.style.color = 'white';
-      errDiv.style.zIndex = '999999';
-      errDiv.style.padding = '20px';
-      errDiv.textContent = 'PROMISE REJECTION: ' + (e.reason ? e.reason.message : e.reason);
-      document.body.appendChild(errDiv);
-    });
+    if (location.hostname === 'localhost' || location.hostname === '127.0.0.1') {
+      window.addEventListener('error', function(e) {
+        var errDiv = document.createElement('div');
+        errDiv.style.position = 'fixed';
+        errDiv.style.top = '0';
+        errDiv.style.left = '0';
+        errDiv.style.width = '100%';
+        errDiv.style.background = 'red';
+        errDiv.style.color = 'white';
+        errDiv.style.zIndex = '999999';
+        errDiv.style.padding = '20px';
+        errDiv.textContent = 'JS ERROR: ' + e.message + ' at ' + e.filename + ':' + e.lineno;
+        document.body.appendChild(errDiv);
+      });
+      window.addEventListener('unhandledrejection', function(e) {
+        var errDiv = document.createElement('div');
+        errDiv.style.position = 'fixed';
+        errDiv.style.top = '50px';
+        errDiv.style.left = '0';
+        errDiv.style.width = '100%';
+        errDiv.style.background = 'orange';
+        errDiv.style.color = 'white';
+        errDiv.style.zIndex = '999999';
+        errDiv.style.padding = '20px';
+        errDiv.textContent = 'PROMISE REJECTION: ' + (e.reason ? e.reason.message : e.reason);
+        document.body.appendChild(errDiv);
+      });
+    }
   </script>
 
   <!-- Open Graph meta tags for social media sharing -->
diff --git a/src/templates/index.html b/src/templates/index.html
index f6677c16..8d1848ca 100644
--- a/src/templates/index.html
+++ b/src/templates/index.html
@@ -9,32 +9,34 @@
   <title>DevPath — Find Projects Based On Your Skills</title>
   
   <script>
-    window.addEventListener('error', function(e) {
-      var errDiv = document.createElement('div');
-      errDiv.style.position = 'fixed';
-      errDiv.style.top = '0';
-      errDiv.style.left = '0';
-      errDiv.style.width = '100%';
-      errDiv.style.background = 'red';
-      errDiv.style.color = 'white';
-      errDiv.style.zIndex = '999999';
-      errDiv.style.padding = '20px';
-      errDiv.textContent = 'JS ERROR: ' + e.message + ' at ' + e.filename + ':' + e.lineno;
-      document.body.appendChild(errDiv);
-    });
-    window.addEventListener('unhandledrejection', function(e) {
-      var errDiv = document.createElement('div');
-      errDiv.style.position = 'fixed';
-      errDiv.style.top = '50px';
-      errDiv.style.left = '0';
-      errDiv.style.width = '100%';
-      errDiv.style.background = 'orange';
-      errDiv.style.color = 'white';
-      errDiv.style.zIndex = '999999';
-      errDiv.style.padding = '20px';
-      errDiv.textContent = 'PROMISE REJECTION: ' + (e.reason ? e.reason.message : e.reason);
-      document.body.appendChild(errDiv);
-    });
+    if (location.hostname === 'localhost' || location.hostname === '127.0.0.1') {
+      window.addEventListener('error', function(e) {
+        var errDiv = document.createElement('div');
+        errDiv.style.position = 'fixed';
+        errDiv.style.top = '0';
+        errDiv.style.left = '0';
+        errDiv.style.width = '100%';
+        errDiv.style.background = 'red';
+        errDiv.style.color = 'white';
+        errDiv.style.zIndex = '999999';
+        errDiv.style.padding = '20px';
+        errDiv.textContent = 'JS ERROR: ' + e.message + ' at ' + e.filename + ':' + e.lineno;
+        document.body.appendChild(errDiv);
+      });
+      window.addEventListener('unhandledrejection', function(e) {
+        var errDiv = document.createElement('div');
+        errDiv.style.position = 'fixed';
+        errDiv.style.top = '50px';
+        errDiv.style.left = '0';
+        errDiv.style.width = '100%';
+        errDiv.style.background = 'orange';
+        errDiv.style.color = 'white';
+        errDiv.style.zIndex = '999999';
+        errDiv.style.padding = '20px';
+        errDiv.textContent = 'PROMISE REJECTION: ' + (e.reason ? e.reason.message : e.reason);
+        document.body.appendChild(errDiv);
+      });
+    }
   </script>
 
   <!-- Open Graph meta tags for social media sharing -->