lobsterboard 0.2.0 → 0.2.2

package/README.md

@@ -6,6 +6,8 @@ A self-hosted, drag-and-drop dashboard builder with 50 widgets, a template galle
 
 ![LobsterBoard](lobsterboard-logo-final.png)
 
+![LobsterBoard Dashboard](lobsterboard-screenshot.jpg)
+
 ## Quick Start
 
 ```bash
@@ -25,6 +27,8 @@ node server.cjs
 
 Open **http://localhost:8080** → press **Ctrl+E** to enter edit mode → drag widgets from the sidebar → click **💾 Save**.
 
+![Edit Mode](lobsterboard-editor.jpg)
+
 ## Features
 
 - **Drag-and-drop editor** — visual layout with 20px snap grid, resize handles, property panel
@@ -47,8 +51,12 @@ Widget settings are edited in the right-hand panel during edit mode. All configu
 
 ## Template Gallery
 
+![Template Gallery](lobsterboard-templates.jpg)
+
 LobsterBoard includes a built-in template system for sharing and reusing dashboard layouts.
 
+![Template Import](lobsterboard-template-detail.jpg)
+
 - **Export** your current dashboard as a template (auto-captures a screenshot preview)
 - **Browse** the template gallery to discover pre-built layouts
 - **Import** templates in two modes:
@@ -56,6 +64,8 @@ LobsterBoard includes a built-in template system for sharing and reusing dashboa
   - **Merge** — append the template's widgets below your existing layout
 - Templates are stored in the `templates/` directory and can be shared as folders
 
+![Dashboard Example](lobsterboard-dashboard-2.jpg)
+
 ## Widgets
 
 ### 🖥️ System Monitoring

package/dist/lobsterboard.css

@@ -1,4 +1,4 @@
-/* LobsterBoard v0.2.0 - Dashboard Styles */
+/* LobsterBoard v0.2.2 - Dashboard Styles */
 /* LobsterBoard Dashboard - Generated Styles */
 
 :root {

package/dist/lobsterboard.esm.js

@@ -1,5 +1,5 @@
 /*!
- * LobsterBoard v0.2.0
+ * LobsterBoard v0.2.2
  * Dashboard builder with customizable widgets
  * https://github.com/curbob/LobsterBoard
  * @license MIT

package/dist/lobsterboard.esm.min.js

@@ -1,5 +1,5 @@
 /*!
- * LobsterBoard v0.2.0
+ * LobsterBoard v0.2.2
  * Dashboard builder with customizable widgets
  * https://github.com/curbob/LobsterBoard
  * @license MIT

package/dist/lobsterboard.umd.js

@@ -1,5 +1,5 @@
 /*!
- * LobsterBoard v0.2.0
+ * LobsterBoard v0.2.2
  * Dashboard builder with customizable widgets
  * https://github.com/curbob/LobsterBoard
  * @license MIT

package/dist/lobsterboard.umd.min.js

@@ -1,5 +1,5 @@
 /*!
- * LobsterBoard v0.2.0
+ * LobsterBoard v0.2.2
  * Dashboard builder with customizable widgets
  * https://github.com/curbob/LobsterBoard
  * @license MIT

package/js/builder.js

@@ -143,7 +143,7 @@ function executeWidgetScripts() {
   state.widgets.forEach(widget => {
     const template = WIDGETS[widget.type];
     if (!template || !template.generateJs) return;
-    const props = { ...widget.properties, id: 'preview-' + widget.id };
+    const props = sanitizeProps({ ...widget.properties, id: 'preview-' + widget.id });
     try {
       const js = template.generateJs(props);
       new Function(js)();
@@ -2436,12 +2436,22 @@ function generateEditJs() {
 `;
 }
 
+function sanitizeProps(props) {
+  const safe = { ...props };
+  for (const key of Object.keys(safe)) {
+    if (typeof safe[key] === 'string') {
+      safe[key] = safe[key].replace(/[`$\\]/g, '\\$&').replace(/'/g, "\\'").replace(/"/g, '\\"');
+    }
+  }
+  return safe;
+}
+
 function generateDashboardJs() {
   const widgetJs = state.widgets.map(widget => {
     const template = WIDGETS[widget.type];
     if (!template || !template.generateJs) return '';
 
-    const props = { ...widget.properties, id: widget.id };
+    const props = sanitizeProps({ ...widget.properties, id: widget.id });
     return template.generateJs(props);
   }).join('\n\n');
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lobsterboard",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Self-hosted drag-and-drop dashboard builder with 50 widgets, template gallery, and custom pages. Works standalone or with OpenClaw.",
   "keywords": [
     "dashboard",

package/server.cjs

@@ -1276,7 +1276,9 @@ const server = http.createServer(async (req, res) => {
 
         const sensitiveKeys = ['apiKey', 'api_key', 'token', 'secret', 'password'];
         const privateIpRegex = /^https?:\/\/(10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|localhost|127\.0\.0\.1)/i;
-        const keepUrlKeys = ['icalUrl', 'feedUrl'];
+        // URLs that may contain private auth tokens — strip them in templates
+        const privateUrlKeys = ['icalUrl'];
+        const privateUrlPatterns = [/[?&/]private[-_]?[a-f0-9]/i, /caldav\.icloud\.com/i, /\/private\//i];
 
         function stripSensitive(props) {
           if (!props || typeof props !== 'object') return props;
@@ -1289,7 +1291,16 @@ const server = http.createServer(async (req, res) => {
             } else if ((key === 'url' || key === 'endpoint') && typeof result[key] === 'string' && privateIpRegex.test(result[key])) {
               result[key] = 'http://your-server:port/path';
               stripped = true;
-            } else if (!keepUrlKeys.includes(key) && typeof result[key] === 'object' && result[key] !== null) {
+            } else if (privateUrlKeys.includes(key) && typeof result[key] === 'string') {
+              // Always strip private calendar/feed URLs — they contain auth tokens
+              if (result[key] && (result[key].length > 0)) {
+                const hasPrivateToken = privateUrlPatterns.some(p => p.test(result[key]));
+                if (hasPrivateToken) {
+                  result[key] = '';
+                  stripped = true;
+                }
+              }
+            } else if (typeof result[key] === 'object' && result[key] !== null) {
               const inner = stripSensitive(result[key]);
               result[key] = inner.result;
               if (inner.stripped) stripped = true;

package/templates/full-screen-focus-on-openclaw-systems/config.json

@@ -269,10 +269,11 @@
       "height": 200,
       "properties": {
         "title": "Calendar",
-        "icalUrl": "https://calendar.google.com/calendar/ical/curbob%40gmail.com/private-da3070618dc7bf05f1515cccd39f09e8/basic.ics",
+        "icalUrl": "",
         "maxEvents": 5,
         "refreshInterval": 300
-      }
+      },
+      "_templateNote": "\u26a0\ufe0f Configure this widget's settings after import"
     },
     {
       "id": "widget-48",
@@ -300,7 +301,7 @@
         "apiKey": "YOUR_API_KEY_HERE",
         "repo": "LobsterBoard"
       },
-      "_templateNote": "⚠️ Configure this widget's settings after import"
+      "_templateNote": "\u26a0\ufe0f Configure this widget's settings after import"
     },
     {
       "id": "widget-50",
@@ -329,7 +330,7 @@
         "apiKeyNote": "Get a free key at finnhub.io/register",
         "refreshInterval": 60
       },
-      "_templateNote": "⚠️ Configure this widget's settings after import"
+      "_templateNote": "\u26a0\ufe0f Configure this widget's settings after import"
     }
   ]
 }