Raphael Michel and luelista
a09dd6a1a7
[SECURITY] Prevent HTML injection through placeholders in emails
...
Co-authored-by: luelista <weller@pretix.eu >
2025-11-27 11:42:34 +01:00
2dc625cf31
Add the option to introduce rich-text placeholders ( #4657 )
...
* Add the option to introduce rich-text placeholders
* Add tests in test_format
* Add some css
* Block vs inline
* Some fixed css
* Update src/pretix/control/forms/event.py
Co-authored-by: Mira <weller@rami.io >
* Add missing docstring prat
---------
Co-authored-by: Mira <weller@rami.io >
2024-12-03 11:38:15 +01:00
dd6ebd7a48
Improve validation of email templates ( #4184 )
...
* Improve validation of email templates
* simplify SafeFormatter (skip attribute access code path altogether instead of blocklisting characters)
* let SafeFormatter optionally raise on missing key
* simplify placeholder validation
* rename parameter
* Remove unused import
---------
Co-authored-by: Raphael Michel <michel@rami.io >
2024-06-10 16:41:52 +02:00
Raphael Michel
28e529995d
Add missing license headers
2022-12-09 13:24:17 +01:00
Raphael Michel and GitHub
b64c5735a8
Make str.format_map with untrusted input safer ( #2931 )
2022-12-08 13:49:07 +01:00