lobsterboard 0.2.1 → 0.2.2

package/dist/lobsterboard.css

@@ -1,4 +1,4 @@
-/* LobsterBoard v0.2.1 - Dashboard Styles */
+/* LobsterBoard v0.2.2 - Dashboard Styles */
 /* LobsterBoard Dashboard - Generated Styles */
 
 :root {

package/dist/lobsterboard.esm.js

@@ -1,5 +1,5 @@
 /*!
- * LobsterBoard v0.2.1
+ * LobsterBoard v0.2.2
  * Dashboard builder with customizable widgets
  * https://github.com/curbob/LobsterBoard
  * @license MIT

package/dist/lobsterboard.esm.min.js

@@ -1,5 +1,5 @@
 /*!
- * LobsterBoard v0.2.1
+ * LobsterBoard v0.2.2
  * Dashboard builder with customizable widgets
  * https://github.com/curbob/LobsterBoard
  * @license MIT

package/dist/lobsterboard.umd.js

@@ -1,5 +1,5 @@
 /*!
- * LobsterBoard v0.2.1
+ * LobsterBoard v0.2.2
  * Dashboard builder with customizable widgets
  * https://github.com/curbob/LobsterBoard
  * @license MIT

package/dist/lobsterboard.umd.min.js

@@ -1,5 +1,5 @@
 /*!
- * LobsterBoard v0.2.1
+ * LobsterBoard v0.2.2
  * Dashboard builder with customizable widgets
  * https://github.com/curbob/LobsterBoard
  * @license MIT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lobsterboard",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Self-hosted drag-and-drop dashboard builder with 50 widgets, template gallery, and custom pages. Works standalone or with OpenClaw.",
   "keywords": [
     "dashboard",

package/server.cjs

@@ -1276,7 +1276,9 @@ const server = http.createServer(async (req, res) => {
 
         const sensitiveKeys = ['apiKey', 'api_key', 'token', 'secret', 'password'];
         const privateIpRegex = /^https?:\/\/(10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|localhost|127\.0\.0\.1)/i;
-        const keepUrlKeys = ['icalUrl', 'feedUrl'];
+        // URLs that may contain private auth tokens — strip them in templates
+        const privateUrlKeys = ['icalUrl'];
+        const privateUrlPatterns = [/[?&/]private[-_]?[a-f0-9]/i, /caldav\.icloud\.com/i, /\/private\//i];
 
         function stripSensitive(props) {
           if (!props || typeof props !== 'object') return props;
@@ -1289,7 +1291,16 @@ const server = http.createServer(async (req, res) => {
             } else if ((key === 'url' || key === 'endpoint') && typeof result[key] === 'string' && privateIpRegex.test(result[key])) {
               result[key] = 'http://your-server:port/path';
               stripped = true;
-            } else if (!keepUrlKeys.includes(key) && typeof result[key] === 'object' && result[key] !== null) {
+            } else if (privateUrlKeys.includes(key) && typeof result[key] === 'string') {
+              // Always strip private calendar/feed URLs — they contain auth tokens
+              if (result[key] && (result[key].length > 0)) {
+                const hasPrivateToken = privateUrlPatterns.some(p => p.test(result[key]));
+                if (hasPrivateToken) {
+                  result[key] = '';
+                  stripped = true;
+                }
+              }
+            } else if (typeof result[key] === 'object' && result[key] !== null) {
               const inner = stripSensitive(result[key]);
               result[key] = inner.result;
               if (inner.stripped) stripped = true;

package/templates/full-screen-focus-on-openclaw-systems/config.json

@@ -269,10 +269,11 @@
       "height": 200,
       "properties": {
         "title": "Calendar",
-        "icalUrl": "https://calendar.google.com/calendar/ical/curbob%40gmail.com/private-da3070618dc7bf05f1515cccd39f09e8/basic.ics",
+        "icalUrl": "",
         "maxEvents": 5,
         "refreshInterval": 300
-      }
+      },
+      "_templateNote": "\u26a0\ufe0f Configure this widget's settings after import"
     },
     {
       "id": "widget-48",
@@ -300,7 +301,7 @@
         "apiKey": "YOUR_API_KEY_HERE",
         "repo": "LobsterBoard"
       },
-      "_templateNote": "⚠️ Configure this widget's settings after import"
+      "_templateNote": "\u26a0\ufe0f Configure this widget's settings after import"
     },
     {
       "id": "widget-50",
@@ -329,7 +330,7 @@
         "apiKeyNote": "Get a free key at finnhub.io/register",
         "refreshInterval": 60
       },
-      "_templateNote": "⚠️ Configure this widget's settings after import"
+      "_templateNote": "\u26a0\ufe0f Configure this widget's settings after import"
     }
   ]
 }