c80c66c2e5
Deep audit identified 106 findings; 102 fixed, 4 deferred. Covers 8 areas: - Settings & deploy: env-gated DEBUG/SECRET_KEY, HTTPS headers, gunicorn, celery worker - Auth (registered_user): password write_only, request.data fixes, transaction safety, proper HTTP status codes - Workout app: IDOR protection, get_object_or_404, prefetch_related N+1 fixes, transaction.atomic - Video/scripts: path traversal sanitization, HLS trigger guard, auth on cache wipe - Models (exercise/equipment/muscle/superset): null-safe __str__, stable IDs, prefetch support - Generator views: helper for registered_user lookup, logger.exception, bulk_update, transaction wrapping - Generator core (rules/selector/generator): push-pull ratio, type affinity normalization, modality checks, side-pair exact match, word-boundary regex, equipment cache clearing - Generator services (plan_builder/analyzer/normalizer): transaction.atomic, muscle cache, bulk_update, glutes classification fix Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
15 lines
701 B
Python
15 lines
701 B
Python
from django.urls import path
|
|
from . import views
|
|
|
|
|
|
urlpatterns = [
|
|
path('all/', views.all_workouts, name='all workouts'),
|
|
path('<workout_id>/details/', views.workout_details, name='single workout details'),
|
|
path('complete/', views.complete_workout, name='user complete workout'),
|
|
path('completed/', views.workouts_completed_by_logged_in_user, name='user completed workouts'),
|
|
path('create/', views.add_workout, name='create new workout'),
|
|
path('planned_workouts/', views.workouts_planned_by_logged_in_user, name='planned workout for user'),
|
|
path('plan_workout/', views.plan_workout, name='plan workout'),
|
|
|
|
path('add_from_files/', views.add_from_files, name='add_from_files'),
|
|
] |