feat: host creator contest on peanut.me

next.config.js

@@ -175,8 +175,9 @@ function contentSecurityPolicyReportOnly() {
         // Widget in Global/Layout renders. Currently unreachable (its Modal is
         // never opened), so it produces no violations today; allow-listed because
         // re-arming it is a one-line change and the failure would be a blank
-        // iframe under enforcement.
-        "frame-src 'self' https://*.crisp.chat https://*.sumsub.com https://widget.manteca.dev https://mpago.la https://*.bridge.xyz https://form.typeform.com",
+        // iframe under enforcement. The creator contest stays on its own Vercel
+        // project and is framed by /creator-contest.
+        "frame-src 'self' https://*.crisp.chat https://*.sumsub.com https://widget.manteca.dev https://mpago.la https://*.bridge.xyz https://form.typeform.com https://peanut-contest.vercel.app",
         "worker-src 'self' blob:",
         "object-src 'none'",
         "base-uri 'self'",

src/app/creator-contest/__tests__/page.test.tsx

@@ -0,0 +1,17 @@
+import { render, screen } from '@testing-library/react'
+import CreatorContestPage from '../page'
+
+describe('CreatorContestPage', () => {
+    it('embeds the contest with the required iframe permissions', () => {
+        render(<CreatorContestPage />)
+
+        const iframe = screen.getByTitle('Peanut Creator Contest')
+        expect(iframe).toHaveAttribute('src', 'https://peanut-contest.vercel.app/')
+        expect(iframe).toHaveAttribute('allow', 'storage-access *')
+        expect(iframe).toHaveAttribute(
+            'sandbox',
+            'allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts allow-storage-access-by-user-activation'
+        )
+        expect(iframe).toHaveAttribute('referrerpolicy', 'strict-origin-when-cross-origin')
+    })
+})

src/app/creator-contest/page.tsx

@@ -0,0 +1,22 @@
+import { type Metadata } from 'next'
+
+export const metadata: Metadata = {
+    title: 'Peanut Creator Contest',
+    description: 'The Peanut content contest for creators in Brazil.',
+    robots: { index: false, follow: false },
+}
+
+export default function CreatorContestPage() {
+    return (
+        <main className="h-[100dvh] w-full bg-white">
+            <iframe
+                src="https://peanut-contest.vercel.app/"
+                title="Peanut Creator Contest"
+                className="h-full w-full border-0"
+                allow="storage-access *"
+                sandbox="allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts allow-storage-access-by-user-activation"
+                referrerPolicy="strict-origin-when-cross-origin"
+            />
+        </main>
+    )
+}

src/constants/routes.ts

@@ -56,6 +56,7 @@ export const DEDICATED_ROUTES = [
     'lp',
     'exchange',
     'shhhhh',
+    'creator-contest',
 
     // Future SEO routes (pre-register so catch-all doesn't intercept)
     'send-money-to',