- update_prep_task: move whitelist guard above filter so invalid column check runs on raw kwargs (was dead code — set(filtered) - allowed is always empty); fixes latent SQL injection path for future callers - main.py: move register_kiwi_programs() into lifespan context manager so it runs once at startup, not at module import time - MealPlanView.vue: remove debug console.log stubs from onSlotClick and onAddMealType (follow-up issue handlers, not ready for production) |
||
|---|---|---|
| .. | ||
| migrations | ||
| __init__.py | ||
| base.py | ||
| models.py | ||
| session.py | ||
| store.py | ||