Shaharear Rahman
Sabbir

1. Structured a completely separate, low-privilege 'sandbox.html' document explicitly registered in the Manifest sandbox scope. Used HTML5 window.postMessage to bridge localized input data safely to an completely isolated iframe context, completely disconnecting code execution from privileged chrome.* extension APIs.

Developed custom backend middleware to verify JWTs and enforce business logic, such as checking enrollment counts before allowing a student to join a new course.

Implemented transactional operations for critical tasks like post creation and commenting to ensure data integrity.

I overcame the initial lack of direction by breaking the project into smaller, manageable milestones—starting with Firebase Authentication before moving to CRUD operations for plant management.

I created a dedicated Auth Context provider to broadcast the user's login status globally, allowing components to reactively show or hide "Install" and "Review" features.