Kyle Pope 68a609ee50 Mask calendar name/color for invited events (pen test F-01) ...

Invitees no longer see the event owner's calendar name/color,
preventing minor information disclosure (CWE-200).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-16 14:04:13 +08:00

..

jobs

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

models

Implement event invitation feature (invite, RSVP, per-occurrence override, leave)

2026-03-15 02:47:27 +08:00

routers

Mask calendar name/color for invited events (pen test F-01)

2026-03-16 14:04:13 +08:00

schemas

Fix QA findings: flush before notify, dedup RSVP, sa_false, validation

2026-03-16 14:01:15 +08:00

services

Fix QA findings: flush before notify, dedup RSVP, sa_false, validation

2026-03-16 14:01:15 +08:00

__init__.py

Initial commit

2026-02-15 16:13:41 +08:00

config.py

Auto-derive CORS_ORIGINS from UMBRA_URL in production

2026-03-02 17:53:26 +08:00

database.py

Phase 2: Backend critical path optimizations

2026-03-13 00:05:54 +08:00

main.py

Implement event invitation feature (invite, RSVP, per-occurrence override, leave)

2026-03-15 02:47:27 +08:00