Name: Web Frontend Overlay
Author: kennedym-ds

Activates when sdlc-config.md sets domain.primary: web-frontend or domain.secondary includes it.

Additional ERROR Rules

All user inputs must be sanitized before DOM insertion — use framework escaping or DOMPurify
Images must have alt attributes — decorative images use alt=""
Interactive elements must be keyboard accessible (focus management, key handlers)
No localStorage/sessionStorage for sensitive data (tokens, PII)
CSP (Content Security Policy) headers must be configured — no unsafe-inline for scripts
All forms must have associated labels and validation feedback

Additional WARNING Rules

Activates when sdlc-config.md sets domain.primary: web-frontend or domain.secondary includes it.

All user inputs must be sanitized before DOM insertion — use framework escaping or DOMPurify
Images must have alt attributes — decorative images use alt=""
Interactive elements must be keyboard accessible (focus management, key handlers)
No localStorage/sessionStorage for sensitive data (tokens, PII)
CSP (Content Security Policy) headers must be configured — no unsafe-inline for scripts
All forms must have associated labels and validation feedback