ben 90193ea18c security: implement Phase 1 critical vulnerability fixes ... - Add XSS protection with DOMPurify sanitization in rich text editor - Implement comprehensive file upload security validation - Enhance server-side content sanitization with wp_kses - Add comprehensive security test suite with 194+ test cases - Create security remediation plan documentation Security fixes address: - CRITICAL: XSS vulnerability in event description editor - HIGH: File upload security bypass for malicious files - HIGH: Enhanced CSRF protection verification - MEDIUM: Input validation and error handling improvements 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>		2025-09-25 18:53:23 -03:00
..
admin	feat: Add massive missing plugin infrastructure to repository	2025-08-11 13:30:11 -03:00
certificates	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
communication	feat: Add massive missing plugin infrastructure to repository	2025-08-11 13:30:11 -03:00
community	feat: Major architecture overhaul and critical fixes	2025-08-20 19:35:22 -03:00
database	feat: Add massive missing plugin infrastructure to repository	2025-08-11 13:30:11 -03:00
find-trainer	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
google-sheets	feat: Add massive missing plugin infrastructure to repository	2025-08-11 13:30:11 -03:00
helpers	feat: Add massive missing plugin infrastructure to repository	2025-08-11 13:30:11 -03:00
zoho	feat: Add massive missing plugin infrastructure to repository	2025-08-11 13:30:11 -03:00
class-attendee-profile.php	fix: Resolve duplicate initialization and jQuery selector errors	2025-07-28 17:58:39 -03:00
class-event-author-fixer.php	fix: Ensure trainer registration page is publicly accessible	2025-07-28 10:30:54 -03:00
class-hvac-access-control.php	feat: expand access permissions for master trainers and administrators	2025-09-25 10:16:09 -03:00
class-hvac-activator.php	fix: resolve plugin activation fatal error by removing non-existent create_tables() call	2025-09-24 20:25:40 -03:00
class-hvac-ajax-handlers.php	fix: implement correct TEC 5.0+ hooks for Community Events integration	2025-09-24 14:30:16 -03:00
class-hvac-ajax-optimizer.php	feat: complete Phase 1D transient caching and AJAX optimization system	2025-09-24 16:17:15 -03:00
class-hvac-ajax-security.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-announcements-admin.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-announcements-ajax.php	feat: implement announcement modal system with comprehensive documentation	2025-08-20 16:28:55 -03:00
class-hvac-announcements-cpt.php	feat: Implement secure Trainer Announcements system with comprehensive features	2025-08-20 13:34:15 -03:00
class-hvac-announcements-display.php	feat: Implement secure Trainer Announcements system with comprehensive features	2025-08-20 13:34:15 -03:00
class-hvac-announcements-email.php	feat: Implement secure Trainer Announcements system with comprehensive features	2025-08-20 13:34:15 -03:00
class-hvac-announcements-manager.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-announcements-permissions.php	feat: Implement secure Trainer Announcements system with comprehensive features	2025-08-20 13:34:15 -03:00
class-hvac-approval-workflow.php	fix: Resolve duplicate initialization and jQuery selector errors	2025-07-28 17:58:39 -03:00
class-hvac-breadcrumbs.php	feat: Implement comprehensive user role field and certification tracking system	2025-08-01 10:52:11 -03:00
class-hvac-browser-detection.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-bulk-event-manager.php	fix: correct get_template method call signature in bulk manager	2025-09-24 23:49:18 -03:00
class-hvac-bundled-assets.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-community-events.php	fix: resolve registration form display and event edit issues	2025-08-24 08:27:17 -03:00
class-hvac-dashboard-data.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-dashboard.php	fix: comprehensive dashboard fixes and improvements	2025-08-21 20:41:59 -03:00
class-hvac-deactivator.php	feat: Add automatic page creation for announcements system	2025-08-20 14:26:26 -03:00
class-hvac-documentation-content.php	feat: Implement comprehensive help documentation page	2025-08-11 17:20:51 -03:00
class-hvac-event-cache.php	feat: complete Phase 1D transient caching and AJAX optimization system	2025-09-24 16:17:15 -03:00
class-hvac-event-form-builder.php	security: implement comprehensive security fixes for OWASP Top 10 vulnerabilities	2025-09-25 15:41:27 -03:00
class-hvac-event-manage-header.php	feat: Implement comprehensive user role field and certification tracking system	2025-08-01 10:52:11 -03:00
class-hvac-event-manager.php	feat: implement Phase 1A native WordPress event form system	2025-09-24 15:48:09 -03:00
class-hvac-event-navigation.php	feat: Implement comprehensive user role field and certification tracking system	2025-08-01 10:52:11 -03:00
class-hvac-event-post-handler.php	security: implement Phase 1 critical vulnerability fixes	2025-09-25 18:53:23 -03:00
class-hvac-event-template-manager.php	fix: implement Phase 2A code review fixes for production readiness	2025-09-24 20:13:35 -03:00
class-hvac-find-trainer-assets.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-form-builder.php	feat: complete Phase 2A template system integration and form builder fixes	2025-09-25 07:02:36 -03:00
class-hvac-geocoding-ajax.php	fix: Remove critical security and performance vulnerabilities	2025-08-06 13:49:42 -03:00
class-hvac-geocoding-service.php	feat: Implement comprehensive security fixes for production deployment	2025-08-06 13:31:38 -03:00
class-hvac-help-system.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-import-export-manager.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-layout-manager.php	refactor: remove all theme-specific code for WordPress compliance	2025-08-20 18:38:52 -03:00
class-hvac-logger.php	fix: Remove critical security and performance vulnerabilities	2025-08-06 13:49:42 -03:00
class-hvac-mapgeo-safety.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-master-content-injector.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-master-dashboard-data.php	feat: Implement cache invalidation system for master dashboard	2025-08-06 17:03:23 -03:00
class-hvac-master-events-overview.php	feat: complete master trainer area audit and implementation	2025-08-23 09:56:42 -03:00
class-hvac-master-layout-standardizer.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-master-menu-system.php	feat: complete master trainer area audit and implementation	2025-08-23 09:56:42 -03:00
class-hvac-master-pages-fixer.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-master-pending-approvals.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-master-trainers-overview.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-menu-system.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-organizers.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-page-content-fixer.php	fix: Resolve event manage page CSS override and duplicate header issues	2025-07-30 15:36:39 -03:00
class-hvac-page-content-manager.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-page-manager-v2.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-page-manager.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-plugin.php	security: implement comprehensive security fixes for OWASP Top 10 vulnerabilities	2025-09-25 15:41:27 -03:00
class-hvac-profile-sync-handler.php	feat: Implement comprehensive trainer profile custom post type system	2025-08-01 18:45:41 -03:00
class-hvac-qr-generator.php	feat: Implement comprehensive mobile optimization system for HVAC plugin	2025-08-11 08:45:47 -03:00
class-hvac-query-monitor.php	feat: Add Organization Headquarters dropdown fields to registration form	2025-08-08 10:35:14 -03:00
class-hvac-registration.php	fix: resolve registration form display and event edit issues	2025-08-24 08:27:17 -03:00
class-hvac-role-consolidator.php	feat: Implement comprehensive user role field and certification tracking system	2025-08-01 10:52:11 -03:00
class-hvac-roles.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-route-manager.php	fix: resolve critical authentication failures in production	2025-09-24 17:48:19 -03:00
class-hvac-safari-debugger.php	feat: Implement comprehensive Safari browser compatibility system	2025-08-08 21:13:43 -03:00
class-hvac-safari-request-debugger.php	feat: Implement comprehensive Safari browser compatibility system	2025-08-08 21:13:43 -03:00
class-hvac-safari-script-blocker.php	fix: resolve registration form display and event edit issues	2025-08-24 08:27:17 -03:00
class-hvac-scripts-styles.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-secure-storage.php	feat: Implement comprehensive security fixes for production deployment	2025-08-06 13:31:38 -03:00
class-hvac-security-helpers.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-security.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-settings.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-shortcodes.php	feat: expand access permissions for master trainers and administrators	2025-09-25 10:16:09 -03:00
class-hvac-tec-integration.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-tec-tickets.php	security: implement Phase 1 critical vulnerability fixes	2025-09-25 18:53:23 -03:00
class-hvac-template-integration.php	feat: Complete TEC integration with mobile fixes and comprehensive testing	2025-08-18 07:07:06 -03:00
class-hvac-template-loader.php	fix: Resolve duplicate content and raw shortcode display on manage event page	2025-07-30 10:06:49 -03:00
class-hvac-template-router.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-template-security.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-trainer-communication-templates.php	feat: complete master trainer system transformation from 0% to 100% success	2025-09-02 16:41:51 -03:00
class-hvac-trainer-navigation.php	feat: Implement comprehensive user role field and certification tracking system	2025-08-01 10:52:11 -03:00
class-hvac-trainer-profile-manager.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-trainer-profile-settings.php	feat: Implement comprehensive security fixes for production deployment	2025-08-06 13:31:38 -03:00
class-hvac-trainer-status.php	feat: Implement trainer approval workflow with status management	2025-07-28 12:38:34 -03:00
class-hvac-training-leads.php	feat: complete PHP 8+ modernization with backward compatibility	2025-08-31 17:44:39 -03:00
class-hvac-venues.php	feat: comprehensive HVAC plugin development framework and modernization	2025-08-29 11:26:10 -03:00
class-hvac-welcome-popup.php	fix: comprehensive dashboard fixes and improvements	2025-08-21 20:41:59 -03:00
enhanced-csv-import-from-file.php	feat: Implement comprehensive enhanced CSV import system with taxonomy integration	2025-08-04 05:57:08 -03:00
legacy-redirects.php	feat: complete master trainer area audit and implementation	2025-08-23 09:56:42 -03:00
migration-trainer-profiles.php	feat: Implement comprehensive manual geocoding trigger system with 85% coverage	2025-08-01 23:49:27 -03:00
taxonomy-migration.php	feat: Implement comprehensive enhanced CSV import system with taxonomy integration	2025-08-04 05:57:08 -03:00
trait-hvac-singleton.php	feat: implement Phase 1A native WordPress event form system	2025-09-24 15:48:09 -03:00