Skip to content

invokehoneybadger/invokehoneybadger-portal

Repository files navigation

HBV Portal v3.0 — Secure Operations Dashboard

License: MIT Security Version

Live Portal: https://portal.invokehoneybadger.com

Overview

The HoneyBadger Vanguard (iHBV) Portal v3.0 is a security-hardened, static operations dashboard for real-time system monitoring, telemetry visualization, and deployment tracking. Built with zero external dependencies and comprehensive XSS prevention.

Key Features

  • 🔒 Security Hardened: CSP headers, input sanitization, schema validation
  • 📊 Real-Time Monitoring: System health, node status, deployment tracking
  • ⚡ Zero Dependencies: Pure vanilla JavaScript, no third-party libraries
  • ♿ Accessible: WCAG 2.1 compliant, ARIA landmarks, screen reader support
  • 🎨 HBV v3.0 Branding: Consistent iHBV visual identity and theming
  • 📱 Responsive: Mobile-first design with adaptive layouts

Architecture

invokehoneybadger-portal/
├── assets/
│   ├── css/
│   │   └── style.css          # HBV v3.0 theme + accessibility
│   ├── img/
│   │   └── hbv-portal-logo.svg # iHBV branding
│   └── js/
│       └── main.js            # Secure dashboard logic (XSS-proof)
├── data/
│   ├── status.json            # Live status data feed
│   └── status.schema.json     # JSON schema validation
├── .github/
│   └── workflows/
│       └── ci.yml             # Automated testing & validation
├── index.html                 # Main dashboard (CSP-protected)
├── SECURITY.md                # Security policy & reporting
├── LICENSE                    # MIT License
└── README.md                  # This file

Quick Start

Local Development

  1. Clone the repository

    git clone https://github.com/invokehoneybadger/invokehoneybadger-portal.git
    cd invokehoneybadger-portal
  2. Install dev dependencies (optional, for linting)

    npm install
  3. Serve locally

    # Using Python 3
    python -m http.server 8000
    
    # Using Node.js
    npx serve .
    
    # Using PHP
    php -S localhost:8000
  4. Open browser

    http://localhost:8000
    

Updating Status Data

Edit data/status.json to update dashboard metrics:

{
  "healthPct": 98,
  "incidents": 0,
  "lastDeployISO": "2025-12-19T12:00:00Z",
  "nodes": [
    {
      "name": "Node0",
      "status": "OK",
      "cpu": 24,
      "mem": 52
    }
  ]
}

Schema Validation: Data is automatically validated against data/status.schema.json


Deployment

GitHub Pages (Recommended)

  1. Configure Pages

    • Go to: SettingsPages
    • Source: Deploy from branch
    • Branch: main (root directory)
    • Click Save
  2. Custom Domain (optional)

    portal.invokehoneybadger.com
    
    • Add CNAME file (already included)
    • Configure DNS: CNAME<username>.github.io
    • Enable Enforce HTTPS
  3. Security Headers

    • GitHub Pages automatically serves over HTTPS
    • CSP headers configured in index.html

Alternative Hosting

  • Cloudflare Pages: Zero config deployment
  • Netlify: Drag & drop or Git integration
  • Vercel: Automatic deployments from Git
  • AWS S3 + CloudFront: Enterprise CDN hosting

Security

Security Features (v3.0)

XSS Prevention: DOM-based rendering, HTML escaping ✅ Content Security Policy: Strict CSP headers block inline scripts ✅ Input Validation: All data validated against JSON schema ✅ DoS Prevention: Node count limits, timeout controls ✅ Secure Headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy ✅ No External Dependencies: Zero supply chain attack surface

Reporting Vulnerabilities

DO NOT create public issues for security bugs.

📧 Email: security@invokehoneybadger.com

See SECURITY.md for full disclosure policy.


Development

Code Quality

# Lint JavaScript
npm run lint

# Auto-fix linting issues
npm run lint:fix

# Format all files
npm run format

# Check formatting
npm run format:check

# Run all validations
npm run validate

Testing

Currently no automated tests. Manual testing checklist:

  • Dashboard loads without errors
  • Status data fetches and displays correctly
  • Fallback mock data displays on fetch failure
  • Node list renders with correct CPU/MEM metrics
  • Telemetry chart draws without errors
  • All links open in new tabs with rel="noopener noreferrer"
  • CSP headers don't block legitimate resources
  • Mobile responsive layout works correctly

Browser Support

Browser Version Status
Chrome 90+ ✅ Supported
Firefox 88+ ✅ Supported
Safari 14+ ✅ Supported
Edge 90+ ✅ Supported

Requirements: ES2020+ (async/await, optional chaining, nullish coalescing)


Branding Guidelines (iHBV/HBV v3.0)

Official Naming

  • Full Name: HoneyBadger Vanguard v3.0
  • Short Name: HBV v3.0
  • Prefix: iHBV (invoke HoneyBadger)
  • Domain: invokehoneybadger.com

Color Palette

--hbv-bg:      #0a0a0a  /* Background (near black) */
--hbv-fg:      #fbee00  /* Primary yellow */
--hbv-dim:     #c9bd00  /* Dimmed yellow */
--hbv-accent:  #3aa0ff  /* Blue accent */

Logo Usage

  • Use assets/img/hbv-portal-logo.svg for all branding
  • Logo displays "HBV · PORTAL" text
  • Yellow (#fbee00) on black (#0a0a0a)

Project Status

Current Version: 3.0.0 (December 2025)

Changelog

v3.0.0 - 2025-12-19

  • ✅ Complete security hardening (XSS prevention, CSP headers)
  • ✅ Refactored JavaScript (eliminated code duplication)
  • ✅ Added comprehensive documentation
  • ✅ Implemented accessibility features (ARIA, semantic HTML)
  • ✅ Added MIT license and security policy
  • ✅ Updated branding to HBV v3.0 / iHBV standards
  • ✅ Added ESLint/Prettier configuration
  • ✅ Created CI/CD workflow

Contributing

We welcome contributions! Please:

  1. Fork the repository
  2. Create a feature branch (git checkout -b feature/amazing-feature)
  3. Commit with semantic messages (git commit -m 'Add XYZ feature')
  4. Push to branch (git push origin feature/amazing-feature)
  5. Open a Pull Request

Code Standards:

  • Follow existing code style
  • Run npm run validate before committing
  • Update documentation for new features
  • Maintain security best practices

License

This project is licensed under the MIT License - see LICENSE file.

Copyright © 2025 HoneyBadger Vanguard (iHBV)


Links


Support

For questions or support:


Built with ❤️ by the HoneyBadger Vanguard (iHBV) Team

About

No description, website, or topics provided.

Resources

License

Contributing

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors