Fix newline injection in webhook URL

Author: SuvinCode

src/api/client.js

@@ -1,4 +1,4 @@
-export const API_BASE_URL = import.meta.env.VITE_API_URL || 'http://127.0.0.1:5001';
+export const API_BASE_URL = (import.meta.env.VITE_API_URL || 'http://127.0.0.1:5001').trim();
 
 // Strips markdown link formatting e.g. "[a@b.com](mailto:a@b.com)" → "a@b.com"
 export function cleanEmail(raw) {

src/pages/Onboarding.jsx

@@ -23,8 +23,8 @@ export default function Onboarding() {
     medical_license: '', specialisation: ''
   });
 
-  const baseUrl = API_BASE_URL.trim().replace(/\/$/, "");
-  const webhookUrl = `${baseUrl}/webhook/apple-health?user_email=${user?.email?.toLowerCase()}`.replace(/\s/g, '');
+  const baseUrl = API_BASE_URL.replace(/\/$/, "").trim();
+  const webhookUrl = (baseUrl + "/webhook/apple-health?user_email=" + (user?.email?.toLowerCase() || "")).replace(/\s/g, "");
 
   const copyToClipboard = async () => {
     try {