Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

ZenPNL — IDX Stock P&L + TradingView Chart + News (Next.js)

I just shipped a small project called ZenPNL a simple, single page IDX stock dashboard that focuses on three things: chart, P&L, and news (fast, responsive,…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I just shipped a small project called ZenPNL a simple, single page IDX stock dashboard that focuses on three things: chart, P&L, and news (fast, responsive, dark-first).



Live:https://zenpnl.vercel.app



GitHub:https://github.com/meryzennn/profitandloss/



> Not financial advice. Market data can be delayed depending on sources.






Why I built it



I wanted an open and go experience like stock apps:

1) Open the site -> IHSG shows by default

2) Search an IDX ticker -> chart switches instantly

3) Calculate P&L using lots (1 lot = 100 shares)

4) Scroll -> read relevant news without leaving the dashboard






Core features



TradingView chart (IDX + IHSG)




  • Uses the TradingView widget (tv.js) for a real charting feel

  • Default symbol: IHSG / IDX Composite

  • When switching symbols, the chart resets so the previous viewport doesn't stick



Lot-based P&L calculator




  • Inputs: buy/sell price, lots, buy fee %, sell fee %, sell tax %

  • Outputs: net P&L (IDR), ROI %, break-even sell price

  • Small UX helpers: quick set buy/sell = last price



News feed that points to real publishers

Google News RSS is convenient, but RSS links can lead to redirects and sometimes weird/non-article pages.

So I implemented a resolver that:




  • prioritizes the publisher domain from RSS source

  • aggressively filters junk (ads/scripts/assets/spec pages)

  • validates final URLs as real HTML articles



Result: the news list shows actual publisher sources (e.g., local finance media) instead of news.google.com / random pages.



Dark-first UI + micro-interactions




  • Dark mode by default (better for charts)

  • Shimmer loading states for news

  • Subtle hover/press animations to feel app-like






Tech stack




  • Next.js App Router + TypeScript

  • Tailwind CSS

  • SWR for client-side fetching + caching

  • Route Handlers for API normalization:


    • Yahoo search & chart meta for Last / Prev Close

    • Google News RSS -> resolve to publisher URLs











Design choice: Last vs Close



To keep the price card easy to understand:




  • Main price uses Yahoo Last (regularMarketPrice)

  • Change badge uses Last vs Prev Close



This tends to match what users expect from stock apps and feels closer to live than strictly following candle close.






Hard parts (the annoying ones)




  • TradingView + hydration: the widget is client-only DOM injection, so the container ID must be stable to avoid mismatch issues.

  • RSS resolution: extracting clean publisher URLs from aggregated feeds is trickier than it looks (redirect chains, embedded URLs, junk endpoints).






What I'd like to improve next




  • Watchlist (localStorage)

  • Better market ticker (gainers/losers) if I find a stable IDX feed

  • Smarter news relevance (query tuning per ticker to avoid ambiguous keywords)






If you have feedback on the UI/UX or know good IDX-friendly data sources, I'd love suggestions.



Links again: https://zenpnl.vercel.app/ | https://github.com/meryzennn/profitandloss/

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - ZenPNL — IDX Stock P&L + TradingView Chart + News (Next.js)
id: 23ad1780-c460-4c4b-9a7a-345de60bec63
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "ZenPNL — IDX Stock P&L + Tradi" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("ZenPNL  IDX Stock PL  TradingView Chart ")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*ZenPNL  IDX Stock PL  TradingView Chart *"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "ZenPNL  IDX Stock PL  TradingView Chart "
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich ZenPNL — IDX Stock P&L + TradingView Cha.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten ZenPNL — IDX Stock P&L + TradingView Chart + News (Next.js)

Thematisch verwandte Begriffe: ZenPNL, Stock, PampL, TradingView · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-88003 | InvoicePlane is a self-hosted open source application for managing invoi…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag