Claude 2c2df277d1 fix: validate participantIds server-side instead of trusting form input ... Fetch participants from the DB in the action using the season ID from the URL params, eliminating the untrusted participantIds hidden field. Remove the now-unused hidden input from the frontend form. https://claude.ai/code/session_01WHRynBCcugSK7HHEmN6Yuy		2026-02-19 23:40:38 +00:00
..
components	Change participant expectedValue from integer to decimal (#1)	2026-02-19 11:26:40 -08:00
contexts	feat: implement middleware and context provider for Express integration	2025-10-11 20:56:00 -07:00
hooks	feat: Add ConnectionOverlay component for improved socket connection handling and user feedback	2025-10-26 21:01:12 -07:00
lib	feat: add FIFA World Cup 48-team bracket template with group stage and projected scoring	2026-02-14 22:30:12 -08:00
models	fix: remove probability sum validation and add batch save with total EV	2026-02-19 22:54:08 +00:00
routes	fix: validate participantIds server-side instead of trusting form input	2026-02-19 23:40:38 +00:00
services	fix: correct test expectations for ICM edge cases and duplicate text queries	2026-02-17 14:24:07 -08:00
test	feat: Add comprehensive scoring system database schema	2025-10-28 23:40:11 -07:00
types	feat: add FIFA World Cup 48-team bracket template with group stage and projected scoring	2026-02-14 22:30:12 -08:00
utils	Change participant expectedValue from integer to decimal (#1)	2026-02-19 11:26:40 -08:00
welcome	refactor: remove guest book feature and update league settings success flow	2025-10-11 01:03:31 -07:00
app.css	feat: add theme system with dark mode support and navbar component	2025-10-10 23:30:26 -07:00
root.tsx	feat: Update DraftSidebar to include recent picks section and refactor layout; enhance AvailableParticipantsSection and QueueSection styling	2025-10-25 18:25:26 -07:00
routes.ts	feat: implement sports season expected value calculations and probability updates	2025-11-21 22:05:50 -08:00