Fix security issues fixed

- Added sandbox to AI Chatbot iframe
- Enforced form validation with maxLength and email checks in Contact form

X-Lovable-Edit-ID: edt-e8bdfcc4-16a0-4500-aae4-45dbabe9680a
Co-authored-by: Alien69Flow <111972684+Alien69Flow@users.noreply.github.com>

Author: lovable-dev[bot]

src/components/AIChatbot.tsx

@@ -119,7 +119,7 @@ const AIChatbot = () => {
                   <p className="text-alien-green font-nasalization text-[8px] tracking-[0.4em]">SYNCHRONIZING...</p>
                 </div>
               )}
-              <iframe src="https://aitor.lovable.app/" className="w-full h-full border-none" onLoad={() => setIsLoading(false)} title="AI Tor" />
+              <iframe src="https://aitor.lovable.app/" sandbox="allow-scripts allow-same-origin allow-forms" className="w-full h-full border-none" onLoad={() => setIsLoading(false)} title="AI Tor" />
             </div>
           </motion.div>
         )}

src/pages/Contact.tsx

@@ -119,8 +119,25 @@ const Contact: React.FC = () => {
     { type: 'ai', text: '>>> [AiTor]: Neural connection active. Ready to assist.' }
   ]);
 
+  const [formErrors, setFormErrors] = useState<Record<string, string>>({});
+
+  const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+
+  const validateForm = (): boolean => {
+    const errors: Record<string, string> = {};
+    if (!formData.name.trim() || formData.name.trim().length < 2) errors.name = 'Name must be at least 2 characters';
+    if (formData.name.length > 100) errors.name = 'Name must be less than 100 characters';
+    if (!emailRegex.test(formData.email)) errors.email = 'Please enter a valid email address';
+    if (formData.subject.length > 200) errors.subject = 'Subject must be less than 200 characters';
+    if (!formData.message.trim() || formData.message.trim().length < 10) errors.message = 'Message must be at least 10 characters';
+    if (formData.message.length > 2000) errors.message = 'Message must be less than 2000 characters';
+    setFormErrors(errors);
+    return Object.keys(errors).length === 0;
+  };
+
   const handleFormSubmit = (e: React.FormEvent) => {
     e.preventDefault();
+    if (!validateForm()) return;
     setIsSubmitting(true);
     const mailtoLink = `mailto:alien69flow@proton.me?subject=${encodeURIComponent(formData.subject)}&body=${encodeURIComponent(`FROM: ${formData.name}\nEMAIL: ${formData.email}\n\n${formData.message}`)}`;
     window.location.href = mailtoLink;
@@ -418,32 +435,48 @@ const Contact: React.FC = () => {
                 </div>
 
                 <form onSubmit={handleFormSubmit} className="space-y-4">
-                  <Input 
-                    placeholder="Your Name" 
-                    value={formData.name} 
-                    onChange={e => setFormData({...formData, name: e.target.value})} 
-                    className="bg-black/40 border-alien-green/20 text-white focus:border-alien-green/60 rounded-xl h-11 placeholder:text-muted-foreground/60 text-sm" 
-                  />
-                  <Input 
-                    placeholder="Email Address" 
-                    type="email" 
-                    value={formData.email} 
-                    onChange={e => setFormData({...formData, email: e.target.value})} 
-                    className="bg-black/40 border-alien-green/20 text-white focus:border-alien-green/60 rounded-xl h-11 placeholder:text-muted-foreground/60 text-sm" 
-                  />
-                  <Input 
-                    placeholder="Subject" 
-                    value={formData.subject} 
-                    onChange={e => setFormData({...formData, subject: e.target.value})} 
-                    className="bg-black/40 border-alien-green/20 text-white focus:border-alien-green/60 rounded-xl h-11 placeholder:text-muted-foreground/60 text-sm" 
-                  />
-                  <Textarea 
-                    placeholder="Your message to the cosmos..." 
-                    rows={4} 
-                    value={formData.message} 
-                    onChange={e => setFormData({...formData, message: e.target.value})} 
-                    className="bg-black/40 border-alien-green/20 text-white focus:border-alien-green/60 rounded-xl placeholder:text-muted-foreground/60 resize-none text-sm" 
-                  />
+                  <div>
+                    <Input 
+                      placeholder="Your Name" 
+                      value={formData.name} 
+                      onChange={e => setFormData({...formData, name: e.target.value})} 
+                      maxLength={100}
+                      className="bg-black/40 border-alien-green/20 text-white focus:border-alien-green/60 rounded-xl h-11 placeholder:text-muted-foreground/60 text-sm" 
+                    />
+                    {formErrors.name && <p className="text-red-400 text-xs mt-1 font-exo">{formErrors.name}</p>}
+                  </div>
+                  <div>
+                    <Input 
+                      placeholder="Email Address" 
+                      type="email" 
+                      value={formData.email} 
+                      onChange={e => setFormData({...formData, email: e.target.value})} 
+                      maxLength={255}
+                      className="bg-black/40 border-alien-green/20 text-white focus:border-alien-green/60 rounded-xl h-11 placeholder:text-muted-foreground/60 text-sm" 
+                    />
+                    {formErrors.email && <p className="text-red-400 text-xs mt-1 font-exo">{formErrors.email}</p>}
+                  </div>
+                  <div>
+                    <Input 
+                      placeholder="Subject" 
+                      value={formData.subject} 
+                      onChange={e => setFormData({...formData, subject: e.target.value})} 
+                      maxLength={200}
+                      className="bg-black/40 border-alien-green/20 text-white focus:border-alien-green/60 rounded-xl h-11 placeholder:text-muted-foreground/60 text-sm" 
+                    />
+                    {formErrors.subject && <p className="text-red-400 text-xs mt-1 font-exo">{formErrors.subject}</p>}
+                  </div>
+                  <div>
+                    <Textarea 
+                      placeholder="Your message to the cosmos..." 
+                      rows={4} 
+                      value={formData.message} 
+                      onChange={e => setFormData({...formData, message: e.target.value})} 
+                      maxLength={2000}
+                      className="bg-black/40 border-alien-green/20 text-white focus:border-alien-green/60 rounded-xl placeholder:text-muted-foreground/60 resize-none text-sm" 
+                    />
+                    {formErrors.message && <p className="text-red-400 text-xs mt-1 font-exo">{formErrors.message}</p>}
+                  </div>
                   <Button 
                     type="submit" 
                     disabled={isSubmitting}