- {item.title} -
-{item.desc}
-
- Origin Story
-
- {item.desc}
-diff --git a/.jules/sentinel.md b/.jules/sentinel.md
new file mode 100644
index 0000000..add14aa
--- /dev/null
+++ b/.jules/sentinel.md
@@ -0,0 +1,4 @@
+## 2024-05-24 - [dangerouslySetInnerHTML XSS Vulnerability]
+**Vulnerability:** Found a Cross-Site Scripting (XSS) vulnerability in `RoomAIChat` where chat messages were being rendered using `dangerouslySetInnerHTML` to support `
` tags for newlines.
+**Learning:** Using `.replace(/\n/g, '
')` paired with `dangerouslySetInnerHTML` is a highly dangerous pattern in React that inadvertently allows malicious HTML/JS execution if user input flows through it (e.g. chat messages).
+**Prevention:** Always use standard React text rendering `{msg.content}` paired with CSS `white-space: pre-wrap` (or Tailwind's `whitespace-pre-wrap`) to safely render text with line breaks without exposing the app to XSS risks.
\ No newline at end of file
diff --git a/src/app/about/page.tsx b/src/app/about/page.tsx
deleted file mode 100644
index 1d7e5cc..0000000
--- a/src/app/about/page.tsx
+++ /dev/null
@@ -1,162 +0,0 @@
-"use client";
-
-import { motion } from "framer-motion";
-import { RetroBackground } from "@/components/ui/retro-background";
-import { Button } from "@/components/ui/button";
-import Link from "next/link";
-import { ArrowLeft, Rocket, Users, Target, Clock } from "lucide-react";
-
-export default function AboutPage() {
- return (
-
{item.desc}
-{item.desc}
-