Add hardcoded URL checker

[csecrestjr]

Summary

• add script to report hardcoded localhost URLs
• run hardcoded URL check on pull requests via GitHub Actions
• document URL check script for local use

Testing

• ./scripts/list-hardcoded-urls.sh (fails: Hardcoded localhost URLs detected)
• npm test (backend)
• npm test (frontend) (fails: build did not complete)

---

https://chatgpt.com/codex/tasks/task_e_68b4a8f77c888321b80c57b1098d4d1b

[chatgpt-codex-connector]

Codex Review: Here are some suggestions.

Reply with @codex fix comments to fix any unresolved comments.

About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you open a pull request for review, mark a draft as ready, or comment "@codex review". If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex fix this CI failure" or "@codex address that feedback".

[csecrestjr]

@codex fix comment

[chatgpt-codex-connector]

Summary

• Introduced an allowlist of baseline files with intentional localhost references and wired it into the hardcoded URL checker to ignore those paths during scansscripts/hardcoded-url-allowlist.txtL1-L5scripts/list-hardcoded-urls.shL4-L11
• Updated documentation to note the allowlist for the localhost URL checker, clarifying how existing references are handledREADME.mdL134-L141

Testing

• ✅ ./scripts/list-hardcoded-urls.sh
• ✅ npm test (backend)
• ✅ npm test (frontend)

View task →