GGThedandClaude Opus 5
15bfebf4fc
SEC-WEB-001 / OPS-010. script-src porte toujours 'unsafe-inline' : c'est
pour cela que le XSS stocke de SEC-XSS-001 s'executait au lieu d'etre
bloque. Le retirer n'est pas un changement d'une ligne.
Ce qui bloque reellement
Un nonce autorise des elements <script> ; il ne peut rien pour un
attribut onclick="...". Mesure faite : 76 gestionnaires en ligne repartis
dans 15 gabarits. Tant qu'il en reste un, la politique ne peut pas etre
durcie.
Piege supplementaire, documente dans build_csp() : en CSP niveau 3, un
navigateur ignore 'unsafe-inline' des qu'un nonce est present. Emettre
les deux ne serait donc pas une transition douce -- ce serait couper
d'un coup tous les scripts en ligne et tous les onclick, et uniquement
sur les navigateurs recents. La bascule doit etre atomique, d'ou un
drapeau unique : CSP_ALLOW_INLINE_SCRIPT.
Infrastructure posee
build_csp() assemble l'en-tete selon le drapeau. Un nonce est genere par
requete et n'est emis que lorsque l'inline est interdit. Les 15 blocs
<script> portent deja nonce="{{ csp_nonce }}", inerte aujourd'hui : la
bascule finale sera un changement de configuration, pas de gabarits.
Couche partagee migree en premier
base.html et macros.html sont rendus sur absolument toutes les pages. Six
gestionnaires retires, remplaces par des attributs data-action et un
ecouteur delegue unique dans main.js. La delegation plutot qu'un
ecouteur par widget : le contenu injecte dynamiquement herite du
comportement sans re-attachement.
Un cliquet plutot qu'une promesse
tests/test_csp.py fixe un budget par gabarit qui ne peut que baisser.
Ajouter un gestionnaire en ligne fait echouer la suite ; en retirer sans
mettre le budget a jour aussi, ce qui force a enregistrer la progression
dans le diff. A zero, il ne reste qu'a basculer le drapeau.
Le cliquet a d'ailleurs corrige mon propre relevé : mon grep initial
comptait 83 gestionnaires, la mesure exacte en donne 76 -- le motif ne
verifiait pas l'espace avant l'attribut.
style-src conserve 'unsafe-inline' : les attributs style="" sont partout et
ne constituent pas un vecteur XSS a eux seuls. Migration distincte.
192 tests.
Co-Authored-By: Claude Opus 5 <[email protected]>
542 lines
22 KiB
HTML
542 lines
22 KiB
HTML
{% extends "layouts/base.html" %}
|
|
{% block title %}Teams - TryoutPro{% endblock %}
|
|
{% block page_title %}Teams{% endblock %}
|
|
{% block breadcrumb %}<span class="breadcrumb">Home / Teams</span>{% endblock %}
|
|
|
|
{% block header_actions %}
|
|
{% if can_manage %}
|
|
<button class="btn btn-primary" onclick="showCreateForm()">
|
|
<i class="fas fa-plus"></i> New Team
|
|
</button>
|
|
{% endif %}
|
|
{% endblock %}
|
|
|
|
{% block content %}
|
|
{% if can_manage %}
|
|
<div id="createTeamForm" class="card mb-4 {% if not form_visible %}hidden{% endif %}">
|
|
<div class="card-header">
|
|
<h3>Create New Team</h3>
|
|
</div>
|
|
<div class="card-body">
|
|
<form method="POST" action="{{ url_for('teams.create_team') }}" class="form">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
|
|
<div class="form-row">
|
|
<div class="form-group col-4">
|
|
<label for="name">Team Name</label>
|
|
<input type="text" id="name" name="name" placeholder="e.g., Varsity, JV, U14" required>
|
|
</div>
|
|
<div class="form-group col-4">
|
|
<label for="coach_id">Assigned Coach</label>
|
|
<select id="coach_id" name="coach_id" class="form-select">
|
|
<option value="">-- No coach assigned --</option>
|
|
{% for coach in coaches %}
|
|
<option value="{{ coach.id }}">{{ coach.username }}</option>
|
|
{% endfor %}
|
|
</select>
|
|
</div>
|
|
<div class="form-group col-4">
|
|
<label for="manager_id">Assigned Manager</label>
|
|
<select id="manager_id" name="manager_id" class="form-select">
|
|
<option value="">-- No manager assigned --</option>
|
|
{% for manager in managers %}
|
|
<option value="{{ manager.id }}">{{ manager.username }}</option>
|
|
{% endfor %}
|
|
</select>
|
|
</div>
|
|
</div>
|
|
<div class="form-actions">
|
|
<button type="button" class="btn btn-secondary" onclick="hideCreateForm()">Cancel</button>
|
|
<button type="submit" class="btn btn-primary">Create Team</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
|
|
{% for team in teams %}
|
|
{% set can_manage_team = can_manage or (current_user.role == 'coach' and team.coach_id == current_user.id) %}
|
|
<div class="card mb-4">
|
|
<div class="card-header">
|
|
<h3><i class="fas fa-users-cog"></i> {{ team.name }}</h3>
|
|
<div class="card-actions">
|
|
{% if can_manage %}
|
|
<button class="btn btn-sm btn-outline edit-team-btn" data-team-id="{{ team.id }}" data-team-name="{{ team.name }}" data-coach-id="{{ team.coach_id or '' }}" data-manager-id="{{ team.manager_id or '' }}">
|
|
<i class="fas fa-edit"></i> Edit
|
|
</button>
|
|
<form method="POST" action="{{ url_for('teams.delete_team', team_id=team.id) }}" class="inline-form" onsubmit="return confirm('Delete team {{ team.name }}? This will unassign it from any linked tryouts.')">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
|
|
<button type="submit" class="btn btn-sm btn-danger">
|
|
<i class="fas fa-trash"></i> Delete
|
|
</button>
|
|
</form>
|
|
{% endif %}
|
|
{% if current_user.role == 'coach' and team.coach_id == current_user.id %}
|
|
<a href="{{ url_for('users.notes_dashboard') }}" class="btn btn-sm btn-primary" title="Add Notes">
|
|
<i class="fas fa-sticky-note"></i> Notes
|
|
</a>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
<!-- Full-width staff bar for coaches and managers -->
|
|
<div class="team-staff-bar">
|
|
<div class="staff-row">
|
|
<div class="staff-group">
|
|
<span class="staff-label"><i class="fas fa-chalkboard-teacher"></i> Coaches</span>
|
|
<div class="staff-items">
|
|
{% set team_coaches = team.get_coaches() %}
|
|
{% if team_coaches %}
|
|
{% for c in team_coaches %}
|
|
<span class="staff-tag">
|
|
{{ c.username }}
|
|
{% if can_manage %}
|
|
<form method="POST" action="{{ url_for('teams.remove_coach', team_id=team.id) }}" class="inline-form" onsubmit="return confirm('Remove coach {{ c.username }} from {{ team.name }}?')">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
|
|
<input type="hidden" name="coach_id" value="{{ c.id }}"/>
|
|
<button type="submit" class="btn-icon-sm" title="Remove Coach">×</button>
|
|
</form>
|
|
{% endif %}
|
|
</span>
|
|
{% endfor %}
|
|
{% else %}
|
|
<span class="text-muted text-sm">None assigned</span>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
<div class="staff-group">
|
|
<span class="staff-label"><i class="fas fa-user-tie"></i> Managers</span>
|
|
<div class="staff-items">
|
|
{% set team_managers = team.get_managers() %}
|
|
{% if team_managers %}
|
|
{% for m in team_managers %}
|
|
<span class="staff-tag manager-tag">
|
|
{{ m.username }}
|
|
{% if can_manage %}
|
|
<form method="POST" action="{{ url_for('teams.remove_manager', team_id=team.id) }}" class="inline-form" onsubmit="return confirm('Remove manager {{ m.username }} from {{ team.name }}?')">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
|
|
<input type="hidden" name="manager_id" value="{{ m.id }}"/>
|
|
<button type="submit" class="btn-icon-sm" title="Remove Manager">×</button>
|
|
</form>
|
|
{% endif %}
|
|
</span>
|
|
{% endfor %}
|
|
{% else %}
|
|
<span class="text-muted text-sm">None assigned</span>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
<a href="{{ url_for('team_matches.list_matches') }}?team_id={{ team.id }}" class="btn btn-sm btn-outline" title="View Team Matches">
|
|
<i class="fas fa-futbol"></i> Matches
|
|
</a>
|
|
{% if current_user.can_schedule_matches() and (current_user.role in ['admin', 'manager'] or (current_user.role == 'coach' and team.coaches.filter_by(id=current_user.id).first()) or (current_user.role == 'coach' and team.coach_id == current_user.id)) %}
|
|
<a href="{{ url_for('team_matches.create_match', team_id=team.id) }}" class="btn btn-sm btn-success" title="Schedule Team Match">
|
|
<i class="fas fa-plus"></i> Match
|
|
</a>
|
|
<a href="{{ url_for('team_matches.create_match', team_id=team.id, type='practice') }}" class="btn btn-sm btn-info" title="Schedule Practice">
|
|
<i class="fas fa-dumbbell"></i> Practice
|
|
</a>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
<div class="card-body">
|
|
<div class="table-container">
|
|
<table class="table">
|
|
<thead>
|
|
<tr>
|
|
<th>Player</th>
|
|
<th>Status</th>
|
|
<th>Position / Role</th>
|
|
<th>Email</th>
|
|
<th>Phone</th>
|
|
{% if can_manage_team %}
|
|
<th>Actions</th>
|
|
{% endif %}
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
{% for entry in team.get_players_with_status() %}
|
|
<tr>
|
|
<td>
|
|
<div class="user-mini">
|
|
<div class="avatar-sm">{{ entry.player.username[:2] | upper }}</div>
|
|
<a href="{{ url_for('users.view_user', user_id=entry.player.id) }}">{{ entry.player.username }}</a>
|
|
</div>
|
|
</td>
|
|
<td>
|
|
{% if can_manage_team %}
|
|
<button class="btn btn-sm status-toggle-btn {% if entry.status == 'starter' %}btn-success{% else %}btn-warning{% endif %}"
|
|
data-team-id="{{ team.id }}"
|
|
data-player-id="{{ entry.player.id }}"
|
|
onclick="toggleStatus(this)">
|
|
{{ entry.status | capitalize }}
|
|
</button>
|
|
{% else %}
|
|
<span class="badge {% if entry.status == 'starter' %}badge-success{% else %}badge-warning{% endif %}">
|
|
{{ entry.status | capitalize }}
|
|
</span>
|
|
{% endif %}
|
|
</td>
|
|
<td>{{ entry.player.role | capitalize }}</td>
|
|
<td>{{ entry.player.email }}</td>
|
|
<td>{{ entry.player.phone or '-' }}</td>
|
|
{% if can_manage_team %}
|
|
<td>
|
|
<form method="POST" action="{{ url_for('teams.remove_player', team_id=team.id, player_id=entry.player.id) }}" class="inline-form" onsubmit="return confirm('Remove {{ entry.player.username }} from {{ team.name }}?')">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
|
|
<button type="submit" class="btn btn-sm btn-danger">
|
|
<i class="fas fa-user-minus"></i> Remove
|
|
</button>
|
|
</form>
|
|
</td>
|
|
{% endif %}
|
|
</tr>
|
|
{% else %}
|
|
<tr>
|
|
<td colspan="{% if can_manage_team %}6{% else %}5{% endif %}" class="text-center">
|
|
<div class="empty-state">
|
|
<i class="fas fa-users-slash"></i>
|
|
<h4>No players assigned</h4>
|
|
{% if can_manage_team %}
|
|
<p>Add players to this team using the form below.</p>
|
|
{% endif %}
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
{% endfor %}
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
|
|
{% if can_manage_team %}
|
|
<hr class="my-3">
|
|
<div class="add-player-section">
|
|
<h5 class="mb-2"><i class="fas fa-user-plus"></i> Add Player to {{ team.name }}</h5>
|
|
<form method="POST" action="{{ url_for('teams.add_player', team_id=team.id) }}" class="form-inline">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
|
|
<select name="player_id" class="form-select" required>
|
|
<option value="">-- Select a player --</option>
|
|
{% for p in all_players %}
|
|
{% if p.id not in team.players | map(attribute='id') %}
|
|
<option value="{{ p.id }}">{{ p.username }}</option>
|
|
{% endif %}
|
|
{% endfor %}
|
|
</select>
|
|
<select name="status" class="form-select ml-2">
|
|
<option value="starter">Starter</option>
|
|
<option value="substitute">Substitute</option>
|
|
</select>
|
|
<button type="submit" class="btn btn-sm btn-primary ml-2">
|
|
<i class="fas fa-plus"></i> Add to Team
|
|
</button>
|
|
</form>
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
{% else %}
|
|
<div class="card">
|
|
<div class="card-body text-center">
|
|
<div class="empty-state">
|
|
<i class="fas fa-users-cog"></i>
|
|
<h3>No teams yet</h3>
|
|
{% if can_manage %}
|
|
<p>Create organization teams and assign coaches to manage tryouts.</p>
|
|
<button class="btn btn-primary" onclick="showCreateForm()">Create Team</button>
|
|
{% else %}
|
|
<p>There are no teams to display.</p>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
{% endfor %}
|
|
|
|
<!-- Edit Team Modal -->
|
|
<div id="editTeamModal" class="modal hidden">
|
|
<div class="modal-backdrop" onclick="hideEditForm()"></div>
|
|
<div class="modal-content">
|
|
<div class="modal-header">
|
|
<h3>Edit Team</h3>
|
|
<button class="modal-close" onclick="hideEditForm()">×</button>
|
|
</div>
|
|
<div class="modal-body">
|
|
<form id="editTeamForm" method="POST" action="" class="form">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
|
|
<input type="hidden" name="sync_staff" value="1"/>
|
|
|
|
<div class="form-group">
|
|
<label for="edit_name">Team Name</label>
|
|
<input type="text" id="edit_name" name="name" required>
|
|
</div>
|
|
|
|
<hr class="section-divider">
|
|
|
|
<!-- Manage Coaches -->
|
|
<h5 class="mb-2"><i class="fas fa-chalkboard-teacher"></i> Coaches</h5>
|
|
<div class="form-group">
|
|
<select name="coach_ids" id="edit-coach-select" class="form-select" multiple style="min-height: 100px; width: 100%;">
|
|
{% for coach in coaches %}
|
|
<option value="{{ coach.id }}" class="coach-option">{{ coach.username }}</option>
|
|
{% endfor %}
|
|
</select>
|
|
<small class="form-text">Hold Ctrl/Cmd to select multiple. Only unassigned coaches shown.</small>
|
|
</div>
|
|
|
|
<!-- Manage Managers -->
|
|
<h5 class="mb-2"><i class="fas fa-user-tie"></i> Managers</h5>
|
|
<div class="form-group">
|
|
<select name="manager_ids" id="edit-manager-select" class="form-select" multiple style="min-height: 100px; width: 100%;">
|
|
{% for manager in managers %}
|
|
<option value="{{ manager.id }}" class="manager-option">{{ manager.username }}</option>
|
|
{% endfor %}
|
|
</select>
|
|
<small class="form-text">Hold Ctrl/Cmd to select multiple. Only unassigned managers shown.</small>
|
|
</div>
|
|
|
|
<div class="form-actions">
|
|
<button type="button" class="btn btn-secondary" onclick="hideEditForm()">Cancel</button>
|
|
<button type="submit" class="btn btn-primary">Save Changes</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<script nonce="{{ csp_nonce }}">
|
|
function showCreateForm() {
|
|
document.getElementById('createTeamForm').classList.remove('hidden');
|
|
}
|
|
|
|
function hideCreateForm() {
|
|
document.getElementById('createTeamForm').classList.add('hidden');
|
|
}
|
|
|
|
function toggleStatus(btn) {
|
|
var teamId = btn.getAttribute('data-team-id');
|
|
var playerId = btn.getAttribute('data-player-id');
|
|
|
|
fetch('/teams/' + teamId + '/toggle_status/' + playerId, {
|
|
method: 'POST',
|
|
headers: {
|
|
'X-CSRFToken': '{{ csrf_token() }}',
|
|
'Content-Type': 'application/json'
|
|
}
|
|
})
|
|
.then(function(response) { return response.json(); })
|
|
.then(function(data) {
|
|
if (data.success) {
|
|
btn.textContent = data.new_status.charAt(0).toUpperCase() + data.new_status.slice(1);
|
|
if (data.new_status === 'starter') {
|
|
btn.classList.remove('btn-warning');
|
|
btn.classList.add('btn-success');
|
|
} else {
|
|
btn.classList.remove('btn-success');
|
|
btn.classList.add('btn-warning');
|
|
}
|
|
}
|
|
})
|
|
.catch(function(error) {
|
|
console.error('Error:', error);
|
|
});
|
|
}
|
|
|
|
var currentEditTeamId = null;
|
|
|
|
document.addEventListener('DOMContentLoaded', function() {
|
|
document.querySelectorAll('.edit-team-btn').forEach(function(btn) {
|
|
btn.addEventListener('click', function() {
|
|
currentEditTeamId = this.getAttribute('data-team-id');
|
|
var teamName = this.getAttribute('data-team-name');
|
|
document.getElementById('editTeamForm').action = '/teams/' + currentEditTeamId + '/edit';
|
|
document.getElementById('edit_name').value = teamName;
|
|
document.getElementById('editTeamModal').classList.remove('hidden');
|
|
populateEditSelects(currentEditTeamId);
|
|
});
|
|
});
|
|
});
|
|
|
|
function getCurrentStaffIds(teamId, type) {
|
|
// Get currently assigned coach/manager IDs from the staff bar pills
|
|
var ids = [];
|
|
var teamCard = document.querySelector('[data-team-id="' + teamId + '"]');
|
|
if (!teamCard) return ids;
|
|
|
|
var staffBar = teamCard.closest('.card').querySelector('.team-staff-bar');
|
|
if (!staffBar) return ids;
|
|
|
|
var groupIndex = type === 'coach' ? 0 : 1;
|
|
var group = staffBar.querySelectorAll('.staff-group')[groupIndex];
|
|
if (!group) return ids;
|
|
|
|
group.querySelectorAll('.staff-tag form input[name="coach_id"], .staff-tag form input[name="manager_id"]').forEach(function(input) {
|
|
ids.push(input.value);
|
|
});
|
|
|
|
return ids;
|
|
}
|
|
|
|
function populateEditSelects(teamId) {
|
|
var coachSelect = document.getElementById('edit-coach-select');
|
|
var managerSelect = document.getElementById('edit-manager-select');
|
|
|
|
var currentCoachIds = getCurrentStaffIds(teamId, 'coach');
|
|
var currentManagerIds = getCurrentStaffIds(teamId, 'manager');
|
|
|
|
// Show all coaches, but pre-select current ones and hide non-assigned
|
|
// Actually: show only currently-assigned options (pre-selected)
|
|
coachSelect.querySelectorAll('.coach-option').forEach(function(opt) {
|
|
var isAssigned = currentCoachIds.includes(opt.value);
|
|
opt.selected = isAssigned;
|
|
// Always show all options so user can add/remove
|
|
opt.style.display = '';
|
|
});
|
|
|
|
managerSelect.querySelectorAll('.manager-option').forEach(function(opt) {
|
|
var isAssigned = currentManagerIds.includes(opt.value);
|
|
opt.selected = isAssigned;
|
|
opt.style.display = '';
|
|
});
|
|
|
|
// Also update text to reflect current count
|
|
document.querySelector('#edit-coach-select + .form-text').textContent =
|
|
'Currently assigned: ' + currentCoachIds.length + '. Hold Ctrl/Cmd to select multiple.';
|
|
document.querySelector('#edit-manager-select + .form-text').textContent =
|
|
'Currently assigned: ' + currentManagerIds.length + '. Hold Ctrl/Cmd to select multiple.';
|
|
}
|
|
|
|
function hideEditForm() {
|
|
document.getElementById('editTeamModal').classList.add('hidden');
|
|
}
|
|
</script>
|
|
<style>
|
|
/* === Full-width staff bar layout === */
|
|
.team-staff-bar {
|
|
padding: 10px 20px;
|
|
background: #f8fafc;
|
|
border-bottom: 1px solid #e2e8f0;
|
|
}
|
|
.staff-row {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 24px;
|
|
flex-wrap: wrap;
|
|
}
|
|
.staff-group {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 8px;
|
|
}
|
|
.staff-label {
|
|
font-size: 0.8rem;
|
|
color: #64748b;
|
|
font-weight: 700;
|
|
text-transform: uppercase;
|
|
letter-spacing: 0.5px;
|
|
white-space: nowrap;
|
|
}
|
|
.staff-label i {
|
|
margin-right: 3px;
|
|
font-size: 0.75rem;
|
|
}
|
|
.staff-items {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 6px;
|
|
flex-wrap: wrap;
|
|
}
|
|
.staff-tag {
|
|
display: inline-flex;
|
|
align-items: center;
|
|
gap: 5px;
|
|
background: #e0e7ff;
|
|
color: #3730a3;
|
|
padding: 3px 10px;
|
|
border-radius: 14px;
|
|
font-size: 0.82rem;
|
|
font-weight: 500;
|
|
line-height: 1.3;
|
|
}
|
|
.staff-tag.manager-tag {
|
|
background: #fef3c7;
|
|
color: #92400e;
|
|
}
|
|
.staff-tag .btn-icon-sm {
|
|
background: none;
|
|
border: none;
|
|
color: #ef4444;
|
|
cursor: pointer;
|
|
padding: 0;
|
|
font-size: 0.85rem;
|
|
font-weight: 700;
|
|
line-height: 1;
|
|
margin-left: 1px;
|
|
}
|
|
.staff-tag .btn-icon-sm:hover {
|
|
color: #dc2626;
|
|
}
|
|
.staff-add-forms {
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 8px;
|
|
margin-left: auto;
|
|
}
|
|
.staff-add-forms .form-select-sm {
|
|
font-size: 0.8rem;
|
|
padding: 4px 28px 4px 10px;
|
|
height: auto;
|
|
border-radius: 6px;
|
|
border: 1px dashed #cbd5e1;
|
|
background: #fff;
|
|
min-width: 150px;
|
|
}
|
|
.staff-add-forms .form-select-sm:focus {
|
|
border-color: #6366f1;
|
|
outline: none;
|
|
box-shadow: 0 0 0 2px rgba(99,102,241,0.15);
|
|
}
|
|
.text-sm {
|
|
font-size: 0.82rem;
|
|
}
|
|
.ml-2 {
|
|
margin-left: 8px;
|
|
}
|
|
.status-toggle-btn {
|
|
cursor: pointer;
|
|
min-width: 90px;
|
|
}
|
|
|
|
/* === Dark mode overrides for staff bar === */
|
|
[data-theme="dark"] .team-staff-bar {
|
|
background: var(--bg-tertiary);
|
|
border-bottom-color: var(--border-color);
|
|
}
|
|
[data-theme="dark"] .staff-label {
|
|
color: var(--text-muted);
|
|
}
|
|
[data-theme="dark"] .staff-tag {
|
|
background: rgba(99, 102, 241, 0.2);
|
|
color: #a5b4fc;
|
|
}
|
|
[data-theme="dark"] .staff-tag.manager-tag {
|
|
background: rgba(229, 169, 57, 0.2);
|
|
color: #fcd34d;
|
|
}
|
|
[data-theme="dark"] .staff-tag .btn-icon-sm {
|
|
color: var(--text-muted);
|
|
}
|
|
[data-theme="dark"] .staff-tag .btn-icon-sm:hover {
|
|
color: var(--danger);
|
|
}
|
|
[data-theme="dark"] .staff-add-forms .form-select-sm {
|
|
background: var(--input-bg);
|
|
border-color: var(--border-color);
|
|
color: var(--text-secondary);
|
|
}
|
|
[data-theme="dark"] .staff-add-forms .form-select-sm:focus {
|
|
border-color: var(--primary);
|
|
box-shadow: 0 0 0 2px rgba(0, 152, 76, 0.25);
|
|
}
|
|
[data-theme="dark"] .staff-add-forms .form-select-sm option {
|
|
background: var(--bg-secondary);
|
|
color: var(--text-primary);
|
|
}
|
|
</style>
|
|
{% endblock %} |