forked from CGM_Public/pretix_original
Display invoices as inline PDF
They are not user-controllable enough to cause any harm here
This commit is contained in:
@@ -1118,7 +1118,8 @@ class InvoiceDownload(EventPermissionRequiredMixin, View):
|
|||||||
invoice_pdf_task.apply(args=(self.invoice.pk,))
|
invoice_pdf_task.apply(args=(self.invoice.pk,))
|
||||||
return self.get(request, *args, **kwargs)
|
return self.get(request, *args, **kwargs)
|
||||||
|
|
||||||
resp['Content-Disposition'] = 'attachment; filename="{}.pdf"'.format(self.invoice.number)
|
resp['Content-Disposition'] = 'inline; filename="{}.pdf"'.format(self.invoice.number)
|
||||||
|
resp._csp_ignore = True # Some browser's PDF readers do not work with CSP
|
||||||
return resp
|
return resp
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -914,5 +914,6 @@ class InvoiceDownload(EventViewMixin, OrderDetailMixin, View):
|
|||||||
except FileNotFoundError:
|
except FileNotFoundError:
|
||||||
invoice_pdf_task.apply(args=(invoice.pk,))
|
invoice_pdf_task.apply(args=(invoice.pk,))
|
||||||
return self.get(request, *args, **kwargs)
|
return self.get(request, *args, **kwargs)
|
||||||
resp['Content-Disposition'] = 'attachment; filename="{}.pdf"'.format(invoice.number)
|
resp['Content-Disposition'] = 'inline; filename="{}.pdf"'.format(invoice.number)
|
||||||
|
resp._csp_ignore = True # Some browser's PDF readers do not work with CSP
|
||||||
return resp
|
return resp
|
||||||
|
|||||||
Reference in New Issue
Block a user