From c4b18a4c813126fa6fc95782cfeb50020a2283d1 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Fri, 22 Mar 2019 12:16:20 +0100 Subject: [PATCH] Force widget data to be a dictionary --- src/pretix/presale/views/cart.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/pretix/presale/views/cart.py b/src/pretix/presale/views/cart.py index ba8d35c52..c42fbc54c 100644 --- a/src/pretix/presale/views/cart.py +++ b/src/pretix/presale/views/cart.py @@ -369,6 +369,8 @@ class CartAdd(EventViewMixin, CartActionMixin, AsyncAction, View): if "widget_data" in request.POST: try: widget_data = json.loads(request.POST.get("widget_data", "{}")) + if not isinstance(widget_data, dict): + widget_data = {} except ValueError: widget_data = {} else: