dualfroz 6a87749efd fix(ical): do not expose user email addresses in calendar feeds ...

The project and user iCal feeds only need a token and they put the
email address of the task assignee and creator in ATTENDEE and
ORGANIZER. Always use the username@kanboard.local address that was
already the fallback for users without an email.

This also fixes ORGANIZER for creators without an email, which was
rendered as a bare MAILTO: because of operator precedence.

2026-10-03 15:14:00 +02:00

..

Api/Procedure

fix(api): remove author email addresses from comments and activity

2026-10-03 17:19:19 +02:00

Controller

fix(ical): only accept known columns as the calendar start date

2026-10-03 16:44:04 +02:00

Core

fix(http): normalize the host before the private network check

2026-10-03 17:43:14 +02:00

Formatter

fix(ical): do not expose user email addresses in calendar feeds

2026-10-03 15:14:00 +02:00

Model

fix(ical): do not expose user email addresses in calendar feeds

2026-10-03 15:14:00 +02:00

Template/analytic

fix(security): escape the project name in the analytic modal title

2026-10-03 15:58:07 +02:00