تشغيل أي مهارة في Manus بنقرة واحدة

local-storage-security

النجوم٣

التفرعات٠

آخر تحديث٤ فبراير ٢٠٢٦ في ١٥:٥٠

Ensures safe localStorage usage in SunnahSleep. Use when reading/writing localStorage. Covers JSON validation, parse error handling, XSS prevention, and data integrity.

التثبيت

التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.

تشغيل في Manus

المصدر

ummahbuild

ummahbuild/sunnahsleep

فتح مستودع GitHub عرض مستودعات المنشئ

تنزيل

تشغيل في Manus

المهن ذات الصلةSOC

استنادا إلى تصنيف SOC المهني

مطوّرو البرمجياتمهن الحاسوب والرياضيات·SOC 15-1252

SKILL.md

readonly

name	local-storage-security
description	Ensures safe localStorage usage in SunnahSleep. Use when reading/writing localStorage. Covers JSON validation, parse error handling, XSS prevention, and data integrity.

Local Storage Security & Safety

Storage Keys Used

Key	Hook	Data Type
islamicSleep	useChecklist	{ date, items, tasbih }
islamicSleepStreak	useChecklist	{ count, lastDate }
sunnahSleepRecords	useSleepTracker	SleepRecord[]
sunnahCurrentSleep	useSleepTracker	Partial
sunnahSleepAlarms	useAlarms	Alarm[]
sunnahSleepAlarmSettings	useAlarms	AlarmSettings
sunnahSleepSnoozed	useAlarms	Record<string, number>
sunnahSleepPrayerTimes	usePrayerTimes	{ times, date }
sunnahSleepTahajjud	usePrayerTimes	TahajjudSettings
sunnahSleepQailulah	usePrayerTimes	QailulahSettings
sunnahSleepLocation	usePrayerTimes	LocationSettings
sunnahSleepDiary	useSleepDiary	DiaryEntry[]

Risks

JSON.parse throws – Invalid/corrupted data crashes app
Schema mismatch – Old format, manual edits, extensions
XSS – Stored HTML/script if data ever rendered as raw HTML (we use React; low risk)
Quota exceeded – localStorage has ~5–10MB limit

Requirements

1. Safe JSON Parse

Never JSON.parse without try/catch:

// BAD
const data = JSON.parse(localStorage.getItem(key)!);

// GOOD
function getJson<T>(key: string): T | null {
  try {
    const raw = localStorage.getItem(key);
    if (!raw) return null;
    return JSON.parse(raw) as T;
  } catch {
    return null;
  }
}

2. Schema Validation

Validate shape before use:

function isStoredData(obj: unknown): obj is StoredData {
  return (
    obj !== null &&
    typeof obj === 'object' &&
    'date' in obj &&
    typeof (obj as StoredData).date === 'string' &&
    'items' in obj &&
    typeof (obj as StoredData).items === 'object'
  );
}

const parsed = getJson<unknown>(STORAGE_KEY);
const data = isStoredData(parsed) ? parsed : null;

3. Fallback on Invalid Data

If parse fails or validation fails, use default state
Do not throw; app should keep working
Optionally clear corrupted key: localStorage.removeItem(key)

4. Sanitization

Only store primitive JSON (no functions, no DOM)
React escaping handles most XSS; avoid dangerouslySetInnerHTML with stored data
Quran/Hadith text is static from codebase, not user input—low risk

5. Quota

For large arrays (e.g., sleep records), consider trimming old entries
Catch QuotaExceededError if writing large data

Checklist

All JSON.parse wrapped in try/catch
Invalid data falls back to defaults
Optional: validate schema before use
No raw user input stored without sanitization
Large datasets trimmed or handled for quota

المزيد من هذا المستودع

نفس المستودع

api-integrations-sunnahsleep

ummahbuild/sunnahsleep

Manages external API integrations for SunnahSleep. Use when working with Aladhan, ipwho.is, Nominatim, Open-Meteo, or Islamic Network CDN. Covers error handling, timeouts, fallbacks, and rate limiting.

2026-02-043

pwa-audit-sunnahsleep

ummahbuild/sunnahsleep

Audits PWA aspects of SunnahSleep. Use when working on offline support, service worker, manifest, caching, or install flow. Covers vite-plugin-pwa, Workbox, and PWA best practices.

2026-02-043

fact-check-sunnah-quran

ummahbuild/sunnahsleep

Verifies Sunnah, Hadith, and Quran content for accuracy and correct sourcing. Use when adding Islamic content, reviewing religious references, or ensuring hadith and Quran verses have valid sources and match authentic texts.

2026-02-043

implement-tests-sunnahsleep

ummahbuild/sunnahsleep

Implements comprehensive tests for SunnahSleep features. Use when adding tests, achieving test coverage, or verifying functionality against README features. Covers hooks, components, data, routing, and integration.

2026-02-043

implement-translations-transliterations

ummahbuild/sunnahsleep

Implements missing transliterations and ensures translation/transliteration consistency across Arabic content. Use when adding new Islamic text, filling transliteration gaps, or updating components to display transliterations. Works with verify-translations-transliterations skill.

2026-02-043

verify-translations-transliterations

ummahbuild/sunnahsleep

Verifies Arabic-to-English translations and transliterations for accuracy. Cross-references against Quran.com, Sunnah.com, and standard romanization. Use when adding Islamic text, reviewing Arabic content, or ensuring translations and transliterations are correct and consistent.

2026-02-043

name	local-storage-security
description	Ensures safe localStorage usage in SunnahSleep. Use when reading/writing localStorage. Covers JSON validation, parse error handling, XSS prevention, and data integrity.

Local Storage Security & Safety

Storage Keys Used

Key	Hook	Data Type
islamicSleep	useChecklist	{ date, items, tasbih }
islamicSleepStreak	useChecklist	{ count, lastDate }
sunnahSleepRecords	useSleepTracker	SleepRecord[]
sunnahCurrentSleep	useSleepTracker	Partial
sunnahSleepAlarms	useAlarms	Alarm[]
sunnahSleepAlarmSettings	useAlarms	AlarmSettings
sunnahSleepSnoozed	useAlarms	Record<string, number>
sunnahSleepPrayerTimes	usePrayerTimes	{ times, date }
sunnahSleepTahajjud	usePrayerTimes	TahajjudSettings
sunnahSleepQailulah	usePrayerTimes	QailulahSettings
sunnahSleepLocation	usePrayerTimes	LocationSettings
sunnahSleepDiary	useSleepDiary	DiaryEntry[]

Risks

JSON.parse throws – Invalid/corrupted data crashes app
Schema mismatch – Old format, manual edits, extensions
XSS – Stored HTML/script if data ever rendered as raw HTML (we use React; low risk)
Quota exceeded – localStorage has ~5–10MB limit

Requirements

1. Safe JSON Parse

Never JSON.parse without try/catch:

// BAD
const data = JSON.parse(localStorage.getItem(key)!);

// GOOD
function getJson<T>(key: string): T | null {
  try {
    const raw = localStorage.getItem(key);
    if (!raw) return null;
    return JSON.parse(raw) as T;
  } catch {
    return null;
  }
}

2. Schema Validation

Validate shape before use:

function isStoredData(obj: unknown): obj is StoredData {
  return (
    obj !== null &&
    typeof obj === 'object' &&
    'date' in obj &&
    typeof (obj as StoredData).date === 'string' &&
    'items' in obj &&
    typeof (obj as StoredData).items === 'object'
  );
}

const parsed = getJson<unknown>(STORAGE_KEY);
const data = isStoredData(parsed) ? parsed : null;

3. Fallback on Invalid Data

If parse fails or validation fails, use default state
Do not throw; app should keep working
Optionally clear corrupted key: localStorage.removeItem(key)

4. Sanitization

Only store primitive JSON (no functions, no DOM)
React escaping handles most XSS; avoid dangerouslySetInnerHTML with stored data
Quran/Hadith text is static from codebase, not user input—low risk

5. Quota

For large arrays (e.g., sleep records), consider trimming old entries
Catch QuotaExceededError if writing large data

Checklist

All JSON.parse wrapped in try/catch
Invalid data falls back to defaults
Optional: validate schema before use
No raw user input stored without sanitization
Large datasets trimmed or handled for quota