63 lines
1.5 KiB
Markdown
63 lines
1.5 KiB
Markdown
|
# Static Pages System
|
|||
|
|
|
|||
|
|
## 1. Endpoint
|
|||
|
|
- Method: `GET`
|
|||
|
|
- Path: `/pages/:slug`
|
|||
|
|
- Scope: tenant-aware by request domain
|
|||
|
|
|
|||
|
|
Supported slugs (example set):
|
|||
|
|
- `about-us`
|
|||
|
|
- `privacy-policy`
|
|||
|
|
- `terms-of-service`
|
|||
|
|
- `returns-policy`
|
|||
|
|
|
|||
|
|
## 2. Storage Model
|
|||
|
|
Pages are stored per tenant:
|
|||
|
|
- key: tenantId + slug
|
|||
|
|
- multilingual content map (locale -> HTML)
|
|||
|
|
- optional SEO metadata per locale
|
|||
|
|
- status (published/draft)
|
|||
|
|
|
|||
|
|
## 3. Example Response
|
|||
|
|
```json
|
|||
|
|
{
|
|||
|
|
"slug": "about-us",
|
|||
|
|
"title": {
|
|||
|
|
"en": "About Us",
|
|||
|
|
"ru": "О компании",
|
|||
|
|
"hy": "Մեր մասին"
|
|||
|
|
},
|
|||
|
|
"content": {
|
|||
|
|
"en": "<h1>About Us</h1><p>...</p>",
|
|||
|
|
"ru": "<h1>О компании</h1><p>...</p>",
|
|||
|
|
"hy": "<h1>Մեր մասին</h1><p>...</p>"
|
|||
|
|
},
|
|||
|
|
"seo": {
|
|||
|
|
"title": { "en": "About Us" },
|
|||
|
|
"description": { "en": "Company information" }
|
|||
|
|
},
|
|||
|
|
"updatedAt": "2026-07-05T09:00:00Z"
|
|||
|
|
}
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 4. Frontend Rendering Rule
|
|||
|
|
Frontend renders static pages via safe HTML flow only:
|
|||
|
|
- resolve locale-specific HTML
|
|||
|
|
- sanitize before binding
|
|||
|
|
- bind to template as trusted/safe HTML only in static page component context
|
|||
|
|
|
|||
|
|
## 5. Security Considerations
|
|||
|
|
Backend requirements:
|
|||
|
|
- content moderation/validation pipeline
|
|||
|
|
- disallow dangerous tags/attributes at content publishing stage
|
|||
|
|
- maintain revision history and audit trail
|
|||
|
|
|
|||
|
|
Frontend requirements:
|
|||
|
|
- enforce sanitizer before rendering
|
|||
|
|
- no raw HTML injection in arbitrary components
|
|||
|
|
|
|||
|
|
Platform requirements:
|
|||
|
|
- tenant isolation on page retrieval
|
|||
|
|
- cache with tenant+slug key
|
|||
|
|
- return 404 for missing slug in tenant scope
|