CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-25 13:12:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

[SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535)

Browse Source
This commit is contained in:
Raphael Michel
2026-06-25 16:19:38 +02:00
committed by Raphael Michel
parent 3953d57c2e
commit 257bb2e4b7
3 changed files with 26 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pretix/helpers/apps.py
+1 -1
View File
@@ -30,7 +30,7 @@ class PretixHelpersConfig(AppConfig):
from .monkeypatching import monkeypatch_all_at_ready
monkeypatch_all_at_ready()
# Ensure reportlab does not make any calls to the internet
# Ensure reportlab does not make any calls to the internet or the local disk
from reportlab import rl_config
rl_config.trustedHosts = []
rl_config.trustedSchemes = ['data']