govind singh

Fix: prevent unauthorized manual check-ins in dashboard

2

closes #1232 ### Description This patch adds validation for the manual check-in endpoint to ensure that only authorized OrderPositions can be checked in. Currently, users can POST arbitrary OrderPosition IDs,...

Missing authorization check in manual check-in endpoint

2

**Describe the bug** The manual check-in endpoint (`/control/event///checkinlists//`) allows users to POST arbitrary `OrderPosition` IDs. Currently, there is **no validation** to ensure that the position belongs to the event or...

fix(win32): remove WS_VISIBLE and add assert in GetClientArea

1

closes #1528 Description: Previously, window_handle_ was set only in WndProc during WM_NCCREATE. This caused a race condition if methods like Show(), SetChildContent(), or GetClientArea() were called immediately after CreateWindow(), potentially...

Win32Window::window_handle_ may be nullptr immediately after CreateWindow

1

In Win32Window::Create, the window_handle_ member is set only in WndProc when handling WM_NCCREATE: auto that = static_cast(window_struct->lpCreateParams); that->window_handle_ = window; This creates a race condition because if any code calls...