[Stellar] Add link to UI builder for stellar #730

CoveMB · 2025-11-11T21:40:15Z

Add link to UI builder for stellar

coderabbitai · 2025-11-11T21:40:25Z

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Walkthrough

These changes update UI Builder navigation across the public-facing HTML files. The index.html file adds an ecosystem query parameter (evm) to the UI Builder link, while stellar.html enhances navigation with updated styling, corrects Stellar switch routing to /stellar, and adds a promotional UI Builder block.

Changes

Cohort / File(s)	Summary
UI Builder Navigation & Promotion `packages/ui/public/index.html`, `packages/ui/public/stellar.html`	index.html: Added `?ecosystem=evm` query parameter to UI Builder link. stellar.html: Updated nav container class styling, changed Stellar switch link from "#" to "/stellar", and added a promotional right-aligned UI Builder block with ecosystem=stellar parameter and CTA button.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

These are straightforward HTML/markup updates with no logic changes—simple URL parameter additions, CSS class updates, and static content additions.

Possibly related PRs

Rename UI Builder label #673: Modifies UI Builder text and content in packages/ui/public/index.html, aligning with the ecosystem parameter additions in this PR.

Suggested reviewers

pasevin
son-oz
ericglau

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description check	✅ Passed	The description 'Add link to UI builder for stellar' is directly related to the changeset, which adds UI builder links for Stellar in the stellar.html file.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Title check	✅ Passed	The title accurately describes the main change: adding a link to the UI Builder for Stellar. It directly relates to the primary modifications across both HTML files.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 2

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between c14be02 and 9919786.

📒 Files selected for processing (2)

packages/ui/public/index.html (1 hunks)
packages/ui/public/stellar.html (1 hunks)

🧰 Additional context used

🪛 ast-grep (0.39.9)

packages/ui/public/stellar.html

[warning] 82-85: "This link points to a plaintext HTTP URL. Prefer an encrypted HTTPS URL if possible."
Context:
Try the UI Builder

Note: [CWE-319] Authentication Bypass by Primary Weakness [REFERENCES]
- https://cwe.mitre.org/data/definitions/319.html

(plaintext-http-link-html)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (4)

GitHub Check: boostsecurity - boostsecurityio/semgrep-pro
GitHub Check: build (stellar, compile)
GitHub Check: build (solidity, default)
GitHub Check: semgrep-cloud-platform/scan

🔇 Additional comments (2)

packages/ui/public/stellar.html (2)

65-68: Navigation container and routing updates look good.

The nav container classes are properly aligned with index.html, and the Stellar switch href correction from # to /stellar with the active class addition is appropriate.

64-89: Promotional block structure and ecosystem parameter handling look good.

The new promotional block is well-structured, properly styled, and correctly uses the ecosystem=stellar parameter for Stellar contracts. The layout mirrors the equivalent pattern in index.html, maintaining consistency across the UI.

coderabbitai · 2025-11-11T21:43:19Z

packages/ui/public/index.html


      <div class="flex items-center">
-        <a href="http://builder.openzeppelin.com" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">
+        <a href="http://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">


⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Use HTTPS for external links to maintain security consistency.

The URL uses plaintext HTTP while all other external links in this file use HTTPS. This inconsistency creates a security concern and should be corrected.

If HTTPS is supported, apply this diff:

- <a href="http://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap"> + <a href="https://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

🌐 Web query:

Does builder.openzeppelin.com support HTTPS connections?

💡 Result:

Yes — builder.openzeppelin.com is served over HTTPS (accessible at https://builder.openzeppelin.com). [1][2]

Sources:
[1] OpenZeppelin UI Builder (builder.openzeppelin.com).
[2] OpenZeppelin Docs — Contracts UI Builder quickstart.

Change HTTP to HTTPS for the UI Builder link.

The endpoint supports HTTPS and should be used for consistency with other external links in this file.

- <a href="http://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap"> + <a href="https://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

<a href="http://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

<a href="https://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

🤖 Prompt for AI Agents

In packages/ui/public/index.html around line 115, the UI Builder anchor uses an insecure "http://builder.openzeppelin.com?ecosystem=evm" href; update the href to use "https://builder.openzeppelin.com?ecosystem=evm" so the link matches other external links and uses HTTPS while leaving the rest of the attributes (target, rel, classes) unchanged.

coderabbitai · 2025-11-11T21:43:19Z

packages/ui/public/stellar.html

+    <div class="flex flex-row gap-2">
+      <div class="text-sm text-gray-600 leading-tight text-right">
+        <div>After deploying a contract, use the</div>
+        <div>new UI Builder to spin up a quick UI</div>
+      </div>
+
+      <div class="flex items-center">
+        <img src="/icons/arrow-right.svg" alt="arrow-right" class="arrow-gray">
+      </div>
+
+      <div class="flex items-center">
+        <a href="http://builder.openzeppelin.com?ecosystem=stellar" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">
+          <span>Try the UI Builder</span>
+          <img src="/icons/up-right-from-square.svg" alt="up-right-from-square" class="arrow-white">
+        </a>
+      </div>
+    </div>


⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Use HTTPS for external links to maintain security consistency.

The UI Builder button on line 83 uses plaintext HTTP while all other external links in this file (and corresponding patterns in index.html) use HTTPS. This inconsistency should be corrected.

If HTTPS is supported, apply this diff:

- <a href="http://builder.openzeppelin.com?ecosystem=stellar" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap"> + <a href="https://builder.openzeppelin.com?ecosystem=stellar" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

🌐 Web query:

Does builder.openzeppelin.com support HTTPS connections?

💡 Result:

Yes — builder.openzeppelin.com is served over HTTPS (https://builder.openzeppelin.com). [1][2]

Sources: OpenZeppelin UI Builder site and docs. [1] https://builder.openzeppelin.com [2] https://docs.openzeppelin.com/ui-builder

Use HTTPS for the UI Builder link to maintain security consistency.

The UI Builder button on line 83 uses plaintext HTTP while all other external links in this file use HTTPS. builder.openzeppelin.com is served over HTTPS, so this should be corrected.

- <a href="http://builder.openzeppelin.com?ecosystem=stellar" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap"> + <a href="https://builder.openzeppelin.com?ecosystem=stellar" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

<div class="flex flex-row gap-2">

<div class="text-sm text-gray-600 leading-tight text-right">

<div>After deploying a contract, use the</div>

<div>new UI Builder to spin up a quick UI</div>

</div>

<div class="flex items-center">

<img src="/icons/arrow-right.svg" alt="arrow-right" class="arrow-gray">

</div>

<div class="flex items-center">

<a href="http://builder.openzeppelin.com?ecosystem=stellar" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

<span>Try the UI Builder</span>

<img src="/icons/up-right-from-square.svg" alt="up-right-from-square" class="arrow-white">

</a>

</div>

</div>

<div class="flex flex-row gap-2">

<div class="text-sm text-gray-600 leading-tight text-right">

<div>After deploying a contract, use the</div>

<div>new UI Builder to spin up a quick UI</div>

</div>

<div class="flex items-center">

<img src="/icons/arrow-right.svg" alt="arrow-right" class="arrow-gray">

</div>

<div class="flex items-center">

<a href="https://builder.openzeppelin.com?ecosystem=stellar" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

<span>Try the UI Builder</span>

<img src="/icons/up-right-from-square.svg" alt="up-right-from-square" class="arrow-white">

</a>

</div>

</div>

🧰 Tools

🪛 ast-grep (0.39.9)

[warning] 82-85: "This link points to a plaintext HTTP URL. Prefer an encrypted HTTPS URL if possible."
Context:
Try the UI Builder

Note: [CWE-319] Authentication Bypass by Primary Weakness [REFERENCES]
- https://cwe.mitre.org/data/definitions/319.html

(plaintext-http-link-html)

🤖 Prompt for AI Agents

In packages/ui/public/stellar.html around lines 72 to 88 the "Try the UI Builder" anchor uses an insecure HTTP URL; change the href from "http://builder.openzeppelin.com?ecosystem=stellar" to "https://builder.openzeppelin.com?ecosystem=stellar" (leave target, rel, and other attributes unchanged) so the external link uses HTTPS like the rest of the file.

packages/ui/public/index.html

packages/ui/public/stellar.html

Co-authored-by: Eric Lau <ericglau@outlook.com>

ericglau · 2025-11-13T03:24:26Z

packages/ui/public/index.html


      <div class="flex items-center">
-        <a href="http://builder.openzeppelin.com" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">
+        <a href="https://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">


For EVM, would it look cleaner to omit ecosystem parameter if that is the default?

Add link to UI builder for stellar

9919786

CoveMB requested a review from a team as a code owner November 11, 2025 21:40

CoveMB requested a review from ericglau November 11, 2025 21:40

coderabbitai bot reviewed Nov 11, 2025

View reviewed changes

CoveMB changed the title ~~Add link to UI builder for stellar~~ [Stellar] Add link to UI builder for stellar Nov 12, 2025

CoveMB and others added 3 commits November 12, 2025 11:30

Use https

47865fb

Merge branch 'master' into stellar-ui-builder-link

c097369

Merge branch 'master' into stellar-ui-builder-link

1b26006

ericglau reviewed Nov 12, 2025

View reviewed changes

packages/ui/public/index.html Outdated Show resolved Hide resolved

packages/ui/public/stellar.html Show resolved Hide resolved

packages/ui/public/stellar.html Outdated Show resolved Hide resolved

CoveMB and others added 2 commits November 12, 2025 12:27

Update packages/ui/public/stellar.html

fa6b6a5

Co-authored-by: Eric Lau <ericglau@outlook.com>

Merge branch 'master' into stellar-ui-builder-link

74f609a

ericglau approved these changes Nov 13, 2025

View reviewed changes

ericglau reviewed Nov 13, 2025

View reviewed changes

Remove ecosystem=evm as it is default

78e4114

CoveMB enabled auto-merge (squash) November 13, 2025 14:46

dylankilkenny approved these changes Nov 13, 2025

View reviewed changes

CoveMB merged commit ae017e8 into master Nov 13, 2025
27 checks passed

CoveMB deleted the stellar-ui-builder-link branch November 13, 2025 14:56

github-actions bot locked and limited conversation to collaborators Nov 13, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Stellar] Add link to UI builder for stellar #730

[Stellar] Add link to UI builder for stellar #730

CoveMB commented Nov 11, 2025

Uh oh!

coderabbitai bot commented Nov 11, 2025 •

edited

Loading

Review skipped

Uh oh!

coderabbitai bot left a comment

Uh oh!

coderabbitai bot Nov 11, 2025

Uh oh!

coderabbitai bot Nov 11, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ericglau Nov 13, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

	<a href="http://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">
	<a href="https://builder.openzeppelin.com?ecosystem=evm" target="_blank" rel="noopener noreferrer" class="bg-[#3d3b5d] text-white px-4 py-2 rounded-full text-sm font-medium flex items-center gap-2 hover:bg-[#4a4872] transition-colors no-underline whitespace-nowrap">

[Stellar] Add link to UI builder for stellar #730

[Stellar] Add link to UI builder for stellar #730

Conversation

CoveMB commented Nov 11, 2025

Uh oh!

coderabbitai bot commented Nov 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Pre-merge checks and finishing touches

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai bot Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

coderabbitai bot Nov 11, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ericglau Nov 13, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

coderabbitai bot commented Nov 11, 2025 •

edited

Loading