Implement all remaining TODO items: search, tags, follow, subscriptions, lazy loading, image preview, notifications, and tests

[Copilot]

Implements all pending items from todo.md across backend and frontend.

Backend

• Search — GET /api/posts/search?q= and GET /api/sections/search?q= with regex-escaped input (ReDoS-safe)
• Tags — tags: [String] on Post model; GET /api/posts/tag/:tag filter endpoint
• Follow — following/followers arrays on User; POST /api/auth/follow/:id, POST /api/auth/unfollow/:id, GET /api/auth/profile/:id
• Subscriptions — subscribedSections array on User; subscribe/unsubscribe routes on sections
• Notifications — New Notification model (like_post, like_comment, comment, follow); CRUD routes at /api/notifications; notifications emitted from posts, comments, and follow routes
• Tests — 17 Jest model schema tests in server/tests/

Frontend

• Search bar in Home.js filtering sections in real-time
• Tag input (comma-separated) in post creation; tag pills in Section.js and Post.js
• UserProfile.js — public user profile page with follow/unfollow; author names in Post.js link to /user/:userId
• "我的订阅" tab in Home.js showing subscribed sections
• Lazy loading — all page components wrapped in React.lazy + Suspense in App.js
• Image lightbox — full-screen overlay on image click in Post.js
• Notifications.js — dropdown component; bell icon with unread badge in Navbar.js
• E2E test — App.test.js render smoke test; fixed Jest module resolution for react-router-dom v7 + axios ESM

Security note

Search regex input is escaped via .replace(/[.*+?^${}()|[\]\\]/g, '\\$&') before constructing RegExp.

---

📍 Connect Copilot coding agent with Jira, Azure Boards or Linear to delegate work to Copilot in one click without leaving your project management tool.

[UnoxyRich]

copilot nb

[easonzhou1031-eng]

rich nb