Kyle Pope 68a609ee50 Mask calendar name/color for invited events (pen test F-01) ...

Invitees no longer see the event owner's calendar name/color,
preventing minor information disclosure (CWE-200).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-16 14:04:13 +08:00

..

__init__.py

Initial commit

2026-02-15 16:13:41 +08:00

admin.py

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

auth.py

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

calendars.py

Fix QA review findings: 3 critical, 5 warnings, 1 suggestion

2026-03-06 23:41:08 +08:00

connections.py

Phase 2: Shared calendars backend core + QA fixes

2026-03-06 04:46:17 +08:00

dashboard.py

Fix QA findings: flush before notify, dedup RSVP, sa_false, validation

2026-03-16 14:01:15 +08:00

event_invitations.py

Implement event invitation feature (invite, RSVP, per-occurrence override, leave)

2026-03-15 02:47:27 +08:00

event_templates.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

events.py

Mask calendar name/color for invited events (pen test F-01)

2026-03-16 14:04:13 +08:00

locations.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

notifications.py

Address QA warnings W-02 through W-07

2026-03-05 23:55:11 +08:00

people.py

Fix QA: IntegrityError handling, dict mutation, birthday sync, None guard

2026-03-04 09:05:46 +08:00

projects.py

Fix team review findings: reactive shared-calendar gate + ReorderItem hardening

2026-03-13 00:50:02 +08:00

reminders.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

settings.py

Action QA findings: refactor sync to accept resolved values

2026-03-07 06:13:21 +08:00

shared_calendars.py

Fix W-06 regression: preferred_name is on Settings, not User model

2026-03-06 23:49:49 +08:00

todos.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

totp.py

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

weather.py

Fix QA review #2: W-03/W-04, S-01 through S-04

2026-02-27 05:41:16 +08:00