Force widget data to be a dictionary

2019-03-22 12:16:20 +01:00
parent 8e2ef604f7
commit c4b18a4c81
1 changed files with 2 additions and 0 deletions
--- a/src/pretix/presale/views/cart.py
+++ b/src/pretix/presale/views/cart.py
@@ -369,6 +369,8 @@ class CartAdd(EventViewMixin, CartActionMixin, AsyncAction, View):
        if "widget_data" in request.POST:
            try:
                widget_data = json.loads(request.POST.get("widget_data", "{}"))
+                if not isinstance(widget_data, dict):
+                    widget_data = {}
            except ValueError:
                widget_data = {}
            else: