feat(staff): protect WhatsApp links from basic web scraping

groups/C4A/js/ui.js

@@ -36,6 +36,29 @@ function isValidWhatsAppNumber(phone) {
     return norm.startsWith('628') && norm.length >= 10 && norm.length <= 15;
 }
 
+/**
+ * Enkripsi nomor telepon menggunakan Base64 untuk keamanan kontak.
+ * @param {string} phone - Nomor telepon ternormalisasi
+ * @returns {string} Nomor telepon terenkripsi Base64
+ */
+function encodePhone(phone) {
+    return btoa(normalizePhone(phone));
+}
+
+/**
+ * Dekripsi nomor telepon dari Base64.
+ * @param {string} encoded - Nomor telepon terenkripsi Base64
+ * @returns {string} Nomor telepon terdekripsi
+ */
+function decodePhone(encoded) {
+    try {
+        return atob(encoded);
+    } catch (error) {
+        console.error('Gagal mendekripsi nomor telepon:', error);
+        return '';
+    }
+}
+
 /**
  * Merender daftar staf pendukung ke dalam container HTML.
  * @param {Array<Object>} staffs - Array data staf pendukung
@@ -58,6 +81,7 @@ export function renderStaffCards(staffs) {
             image,
             location,
             phone,
+            contact_consent: contactConsent,
             schedule,
             tasks
         } = staff;
@@ -70,6 +94,11 @@ export function renderStaffCards(staffs) {
         ).join('');
 
         const tasksHTML = tasks.map(task => `<li>${task}</li>`).join('');
+        const isPhoneValid = isValidWhatsAppNumber(phone);
+        const encodedPhone = isPhoneValid ? encodePhone(phone) : '';
+        const displayPhone = isPhoneValid ? formatPhoneForDisplay(phone) : '-';
+        const hideContactItemClass = contactConsent ? '' : 'is-hidden';
+        const hideContactActionClass = (contactConsent && isPhoneValid) ? '' : 'is-hidden';
         const initial = name ? name.charAt(0).toUpperCase() : '';
 
         const card = document.createElement('div');
@@ -96,15 +125,29 @@ export function renderStaffCards(staffs) {
               <div class="schedule-list">${scheduleHTML}</div>
             </div>
           </div>
-          <div class="staff-info-item"><span class="icon">📞</span><div><span class="label">Kontak</span><span class="val">${phone}</span></div></div>
+          <div class="staff-info-item staff-contact-item ${hideContactItemClass}"><span class="icon">📞</span><div><span class="label">Kontak WhatsApp</span><span class="val">${displayPhone}</span></div></div>
         </div>
         <div class="staff-divider"></div>
         <div class="staff-tasks-title">Tugas & Tanggung Jawab</div>
         <ul class="staff-tasks">${tasksHTML}</ul>
       </div>
+      <div class="staff-card-actions staff-contact-actions ${hideContactActionClass}">
+        <button class="btn-staff btn-staff-wa" data-wa="${encodedPhone}" aria-label="Kirim Pesan WA ${name}"><svg class="wa-icon" viewBox="0 0 24 24" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M17.472 14.382c-.297-.149-1.758-.867-2.03-.967-.273-.099-.471-.148-.67.15-.197.297-.767.966-.94 1.164-.173.199-.347.223-.644.075-.297-.15-1.255-.463-2.39-1.475-.883-.788-1.48-1.761-1.653-2.059-.173-.297-.018-.458.13-.606.134-.133.298-.347.446-.52.149-.174.198-.298.298-.497.099-.198.05-.371-.025-.52-.075-.149-.669-1.612-.916-2.207-.242-.579-.487-.5-.669-.51-.173-.008-.371-.01-.57-.01-.198 0-.52.074-.792.372-.272.297-1.04 1.016-1.04 2.479 0 1.462 1.065 2.875 1.213 3.074.149.198 2.096 3.2 5.077 4.487.709.306 1.262.489 1.694.625.712.227 1.36.195 1.871.118.571-.085 1.758-.719 2.006-1.413.248-.694.248-1.289.173-1.413-.074-.124-.272-.198-.57-.347m-5.421 7.403h-.004a9.87 9.87 0 01-5.031-1.378l-.361-.214-3.741.982.998-3.648-.235-.374a9.86 9.86 0 01-1.51-5.26c.001-5.45 4.436-9.884 9.888-9.884 2.64 0 5.122 1.03 6.988 2.898a9.825 9.825 0 012.893 6.994c-.003 5.45-4.437 9.884-9.885 9.884m8.413-18.297A11.815 11.815 0 0012.05 0C5.495 0 .16 5.335.157 11.892c0 2.096.547 4.142 1.588 5.945L.057 24l6.305-1.654a11.882 11.882 0 005.683 1.448h.005c6.554 0 11.89-5.335 11.893-11.893a11.821 11.821 0 00-3.48-8.413z"/></svg> Kirim Pesan WA</button>
+      </div>
     `;
 
         container.appendChild(card);
+
+        // Setup WA button click handler dengan dekrips nomor
+        const waBtn = card.querySelector('[data-wa]');
+        if (waBtn) {
+            waBtn.addEventListener('click', () => {
+                const phoneNum = decodePhone(waBtn.dataset.wa);
+                if (phoneNum) {
+                    window.open(`https://wa.me/${phoneNum}`, '_blank', 'noopener,noreferrer');
+                }
+            });
+        }
     });
 }
 // ============================================================