Commit graph

2 commits

Author SHA1 Message Date
ben
90193ea18c security: implement Phase 1 critical vulnerability fixes
- Add XSS protection with DOMPurify sanitization in rich text editor
- Implement comprehensive file upload security validation
- Enhance server-side content sanitization with wp_kses
- Add comprehensive security test suite with 194+ test cases
- Create security remediation plan documentation

Security fixes address:
- CRITICAL: XSS vulnerability in event description editor
- HIGH: File upload security bypass for malicious files
- HIGH: Enhanced CSRF protection verification
- MEDIUM: Input validation and error handling improvements

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-25 18:53:23 -03:00
ben
9cc5624d0d feat: implement TEC ticketing integration and template system updates
- Add comprehensive TEC ticketing integration with HVAC_TEC_Tickets class
- Replace hardcoded sample templates with real template data from cleaned reference
- Extend HVAC_Event_Form_Builder with ticketing fields and integration hooks
- Add mandatory attendee information collection (first name, last name, fieldset integration)
- Implement complete ticketing UI with pricing, capacity, RSVP, and sales periods
- Add responsive CSS styling and JavaScript for ticket field management
- Update template modal with enhanced template cards showing duration, difficulty, pricing
- Integrate ticketing system with event creation workflow and form submission

Phase 2B TEC integration complete with real template data and full ticketing functionality.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-25 14:24:41 -03:00