"""
# Global to store compiled template
DASHBOARD_TEMPLATE = None
def get_cached_markdown(filepath):
"""
Returns the markdown content of a file converted to HTML, using a cache
that invalidates based on file modification time.
Optimization: Uses os.stat() to get mtime and check existence in one syscall.
"""
try:
# Optimization: os.stat gets existence and mtime in one call
# removing the need for separate os.path.exists() check
stat_result = os.stat(filepath)
except OSError:
return None
try:
mtime = stat_result.st_mtime
if filepath in _content_cache:
cached_mtime, cached_html = _content_cache[filepath]
if cached_mtime == mtime:
return cached_html
# Cache miss or file changed
with open(filepath, 'r', encoding='utf-8') as f:
content = f.read()
# ⚡ Performance Optimization: Reuse Markdown instance via thread-local storage
if not hasattr(_md_local, 'md'):
_md_local.md = markdown.Markdown()
_md_local.md.reset()
html_content = _md_local.md.convert(content)
_content_cache[filepath] = (mtime, html_content)
return html_content
except Exception as e:
print(f"Error reading/converting {filepath}: {e}")
return None
@app.route('/health')
def health_check():
"""Lightweight health check for load balancers."""
return jsonify({
"status": "healthy",
"timestamp": time.time()
})
@app.after_request
def add_security_headers(response):
"""
Add security headers to every response to protect against
XSS, Clickjacking, and other web vulnerabilities.
"""
# Content-Security-Policy: restrict sources of content
# default-src 'self': only allow content from own origin
# style-src 'self' 'unsafe-inline': allow inline styles (needed for template)
# script-src 'self': only allow scripts from own origin (blocks inline scripts in markdown)
csp = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self'"
response.headers['Content-Security-Policy'] = csp
# X-Content-Type-Options: prevent MIME-sniffing
response.headers['X-Content-Type-Options'] = 'nosniff'
# X-Frame-Options: prevent clickjacking
response.headers['X-Frame-Options'] = 'SAMEORIGIN'
# Referrer-Policy: control referrer information
response.headers['Referrer-Policy'] = 'strict-origin-when-cross-origin'
return response
@app.route('/')
def dashboard():
global DASHBOARD_TEMPLATE
try:
# Use pre-calculated paths
html_readme = get_cached_markdown(README_PATH) or "
README.md not found.
"
html_verification = get_cached_markdown(VERIFICATION_PATH) or "
VERIFICATION.md not found.
"
# ⚡ Performance Optimization: Compile template once instead of every request
if DASHBOARD_TEMPLATE is None:
DASHBOARD_TEMPLATE = app.jinja_env.from_string(DASHBOARD_HTML)
return DASHBOARD_TEMPLATE.render(html_readme=html_readme, html_verification=html_verification, year=2026)
except Exception as e:
logger.error(f"Error rendering dashboard: {e}", exc_info=True)
return "Internal Server Error", 500
if __name__ == '__main__':
port = int(os.environ.get('PORT', 8080))
print(f"Starting web dashboard on port {port}...")
app.run(host='0.0.0.0', port=port)