Files
conference/templates/organizer/edit_breakout_session_confirm.html
T
paul a3546b4c01 Security hardening: env-based config, CSRF protection, secure code generation, plus presenter management and email communications system
- Move all credentials from hardcoded to .env with python-dotenv (add .env.example template and .gitignore)
- Add CSRF token generation and validation on all state-changing requests
- Replace random.choices with secrets.choice for all secure code generation
- Add session cookie security headers (HttpOnly, Secure, SameSite)
- Add presenter management: assign/remove presenters to breakout sessions, presenter QR scanning
- Add email communications system: templates per event, custom email sending, sent email tracking
- Add staff/organizer profile pages with staff code display
- New DB tables: event_email_templates, sent_emails, user_communications
- New DB columns: staff.reminder_count/reminder_dates, breakout_session_organizers.presenter_code
- Expand English translation strings across all new features

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-26 20:34:48 +00:00

54 lines
2.0 KiB
HTML

{% extends "base.html" %}
{% block title %}{{ 'confirm_changes'|t }} - {{ session.name }}{% endblock %}
{% block content %}
<div class="modal-overlay">
<div class="modal-content">
<div class="modal-header">
<h2>{{ 'session_updated'|t }}</h2>
<p>{{ 'changes_made_to'|t }} "{{ session.name }}":</p>
</div>
<div class="changes-list">
{% for field, old_val, new_val in changes %}
<div class="change-item">
<div class="change-label">{{ field }}</div>
<div class="change-values">
<span class="old-value">{{ old_val or '(' + 'empty' + ')' }}</span>
<span class="arrow"><i data-lucide="arrow-right"></i></span>
<span class="new-value">{{ new_val or '(' + 'empty' + ')' }}</span>
</div>
</div>
{% endfor %}
</div>
<form method="POST" action="{{ url_for('notify_breakout_session_attendees', session_id=session.id) }}" id="notify-form">
<input type="hidden" name="changes_text" id="changes-text">
</form>
<div class="modal-actions">
<button type="button" class="btn btn-outline" onclick="skipNotify()">{{ 'skip'|t }}</button>
<button type="button" class="btn btn-primary" onclick="notifyAttendees()"><i data-lucide="mail"></i> {{ 'notify_attendees_email'|t }}</button>
</div>
</div>
</div>
<script>
document.addEventListener('DOMContentLoaded', function() {
lucide.createIcons();
});
function notifyAttendees() {
const changesText = `{% for field, old_val, new_val in changes %}{{ field }}: {{ old_val }} → {{ new_val }}
{% endfor %}`.trim();
document.getElementById('changes-text').value = changesText;
document.getElementById('notify-form').submit();
}
function skipNotify() {
window.location.href = "{{ url_for('view_breakout_session', code=session.code) }}";
}
</script>
{% endblock %}