Merge pull request #4 from abdulisik:small-fixes

Small fixes and updates

README.md

@@ -50,7 +50,7 @@ MVP complete with YouTube integration, including:
 
 ### Community & UX
 
-- In-app feedback system and feature changelog
+- In-app feedback system and feature changelog, offline usage with PWA
 - Cross-platform creator recommendations
 - Dynamic subscription import progress tracking on home page
 
@@ -61,6 +61,16 @@ MVP complete with YouTube integration, including:
 - Data-driven insights for creator platform expansion
 - Timeline tracking for creator connections
 
+### Known Issues
+
+- Invalid links aren't being checked.
+- The chip links from YouTube descriptions aren't being read.
+- There is no option to manually remove a subscription from MySubs.
+- Subscription processing is too slow with new subscriptions.
+- Platform icons are just emojis for now.
+- Should use local storage or IndexedDB
+- Unnecessarily exposes endpoints from Hono, missing quality tests
+
 ## Business Strategy
 
 The platform can monetize through targeted features: premium subscriptions for automatic platform sync, affiliate partnerships with creator platforms, paid creator promotion opportunities, and analytics services.

frontend/src/lib/components/HeroSection.svelte

@@ -89,7 +89,7 @@
 <div class="hero" role="main">
   <div class="headline">Find Your Favorite Creators Across Platforms</div>
   <div class="subtext">
-    Discover creators you already follow and track them across the web.
+    Discover influencers/YouTubers/streamers/creators you already follow and track them across the web.
     <button 
       class="toggle-btn"
       onclick={() => showDetails = !showDetails}

frontend/static/faq.txt

@@ -9,7 +9,7 @@ We only store public data (e.g., video descriptions and profile links). Subscrip
 
 3. How is my data protected?
 
-We don’t store personal data on our servers. Your subscription data and API authorization tokens are stored locally in your browser.
+We don't store personal data on our servers. Your subscription data and API authorization tokens are stored locally in your browser.
 
 4. What happens when I authorize with YouTube?
 
@@ -33,4 +33,8 @@ Yes! We appreciate feedback, donations, and sponsorships to help maintain and im
 
 9. How do you handle API usage limits?
 
-We use rate-limited external APIs (e.g., YouTube). If limits are exceeded, processing will pause, and you’ll be asked to retry later.
+We use rate-limited external APIs (e.g., YouTube). If limits are exceeded, processing will pause, and you'll be asked to retry later.
+
+10. Is this project open-source?
+
+Yes! Contributions are welcome. You can find the source code on GitHub: https://github.com/abdulisik/creator-finder

src/index.tsx

@@ -42,7 +42,12 @@ app.use(async (c: Context, next) => {
   csrf({
     origin: c.env.ORIGIN,
   });
-  secureHeaders();
+  secureHeaders({
+    contentSecurityPolicy: {
+      scriptSrc: c.env.ORIGIN,
+      upgradeInsecureRequests: [],
+    },
+  });
   return await next();
 });
 

wrangler.toml

@@ -8,7 +8,7 @@ upload_source_maps = true
 assets = { directory = "./frontend/.svelte-kit/cloudflare", binding = "ASSETS" }
 
 [vars]
-ORIGIN = ['https://creator-finder.abdulisik.com', 'http://localhost:8787']
+ORIGIN = ['https://creator-finder.abdulisik.com', 'http://localhost:8787', '*.cloudflareinsights.com']
 PAGE_SIZE = 20
 DELAY_SECONDS = [61, 301, 3601, 43200, 43200, 43200, 43200] # 1 minute, 5 minutes, 1 hour, 12 hours...