Adds a TouchHub setup section to README.md covering the ordered runbook (http use_x_frame_options: false, full HA restart, dedicated non-admin kiosk user outside the NestQuest admin allowlist, panel-only Lovelace dashboard, Home Assistant Lovelace app on the TouchHub dock, kiosk login), the clickjacking trade-off in plain language, and two mitigations.
Adds tests/test_frontend.py::test_readme_documents_the_touchhub_setup_runbook asserting the README contains use_x_frame_options, TouchHub, kiosk, clickjacking, and both mitigation statements.
Task afdf9f27. Done-condition: README contains the runbook with the trade-off and at least two mitigations, and uv run pytest -q is green (1496 passed).
Adds a **TouchHub setup** section to README.md covering the ordered runbook (http use_x_frame_options: false, full HA restart, dedicated non-admin kiosk user outside the NestQuest admin allowlist, panel-only Lovelace dashboard, Home Assistant Lovelace app on the TouchHub dock, kiosk login), the clickjacking trade-off in plain language, and two mitigations.
Adds `tests/test_frontend.py::test_readme_documents_the_touchhub_setup_runbook` asserting the README contains use_x_frame_options, TouchHub, kiosk, clickjacking, and both mitigation statements.
Task afdf9f27. Done-condition: README contains the runbook with the trade-off and at least two mitigations, and `uv run pytest -q` is green (1496 passed).
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Adds a TouchHub setup section to README.md covering the ordered runbook (http use_x_frame_options: false, full HA restart, dedicated non-admin kiosk user outside the NestQuest admin allowlist, panel-only Lovelace dashboard, Home Assistant Lovelace app on the TouchHub dock, kiosk login), the clickjacking trade-off in plain language, and two mitigations.
Adds
tests/test_frontend.py::test_readme_documents_the_touchhub_setup_runbookasserting the README contains use_x_frame_options, TouchHub, kiosk, clickjacking, and both mitigation statements.Task afdf9f27. Done-condition: README contains the runbook with the trade-off and at least two mitigations, and
uv run pytest -qis green (1496 passed).