Easier PCI DSS compliance for payment pages (#4273)

* Assign names to compressed scripts

* Make PCI-relevant pages detectable

* Make payment summary markup more consistant to easy work in tracking plugin

* Add docs note
This commit is contained in:
Raphael Michel
2024-07-31 13:11:38 +02:00
committed by GitHub
parent 78cfbd6460
commit 13720e731e
12 changed files with 68 additions and 20 deletions

View File

@@ -8,7 +8,7 @@
<html{% if rtl %} dir="rtl" class="rtl"{% endif %} lang="{{ html_locale }}">
<head>
<title>{% block thetitle %}{% endblock %}</title>
{% compress css %}
{% compress css file presale %}
<link rel="stylesheet" type="text/x-scss" href="{% static "pretixpresale/scss/main.scss" %}"/>
{% endcompress %}
{% if css_theme %}
@@ -92,7 +92,7 @@
<script src="{% statici18n request.LANGUAGE_CODE %}"></script>
{% endif %}
{% if request.session.iframe_session %}
{% compress js %}
{% compress js file iframeresizer %}
<script type="text/javascript" src="{% static "iframeresizer/iframeResizer.contentWindow.js" %}"></script>
{% endcompress %}
{% endif %}

View File

@@ -50,19 +50,15 @@
<ul class="list-group">
{% for payment, rendered_block in payments %}
<li class="list-group-item payment">
{% if payments|length > 1 %}
<div class="row">
<div class="col-sm-10 col-xs-12">
<h4>{{ payment.provider_name }}</h4>
{{ rendered_block }}
</div>
<div class="col-sm-2 col-xs-12 text-right">
<h4>{{ payment.payment_amount|money:request.event.currency }}</h4>
</div>
<div class="row">
<div class="{% if payments|length > 1 %}col-sm-10 {% endif %}col-xs-12">
<h4 {% if payments|length == 1 %}class="sr-only"{% endif %}>{{ payment.provider_name }}</h4>
{{ rendered_block }}
</div>
{% else %}
{{ rendered_block }}
{% endif %}
<div class="col-sm-2 col-xs-12 text-right {% if payments|length == 1 %}sr-only{% endif %}">
<h4>{{ payment.payment_amount|money:request.event.currency }}</h4>
</div>
</div>
</li>
{% endfor %}
</ul>

View File

@@ -1,6 +1,6 @@
{% load static %}
{% load compress %}
{% compress js %}
{% compress js file walletdetection %}
<script type="text/javascript" src="{% static "pretixpresale/js/walletdetection.js" %}"></script>
{% endcompress %}

View File

@@ -1,6 +1,6 @@
{% load static %}
{% load compress %}
{% compress js %}
{% compress js file presale %}
<script type="text/javascript" src="{% static "jquery/js/jquery-3.6.4.min.js" %}"></script>
<script type="text/javascript" src="{% static "moment/moment-with-locales.js" %}"></script>
<script type="text/javascript" src="{% static "moment/moment-timezone-with-data-1970-2030.js" %}"></script>