From 07d27e66d10c9b88025b6e3c797f12027c8d1321 Mon Sep 17 00:00:00 2001
From: Richard Schreiber <schreiber@pretix.eu>
Date: Tue, 9 Jun 2026 13:24:46 +0200
Subject: [PATCH] Use HTTP-REFERER as fallback for vite_origins (#6246)

---
 src/pretix/presale/views/widget.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/pretix/presale/views/widget.py b/src/pretix/presale/views/widget.py
index d45e19417..3c805d4d7 100644
--- a/src/pretix/presale/views/widget.py
+++ b/src/pretix/presale/views/widget.py
@@ -128,6 +128,9 @@ def _use_vite(request):
     origin = request.META.get('HTTP_ORIGIN', '')
     gs = GlobalSettingsObject()
     vite_origins = gs.settings.get('widget_vite_origins', as_type=str, default='')
+    if vite_origins and not origin:
+        referer = request.META.get('HTTP_REFERER', '')
+        origin = '/'.join(referer.split('/', 3)[:3])
     if origin and vite_origins:
         origins_list = [o.strip() for o in vite_origins.strip().splitlines() if o.strip()]
         return origin in origins_list