mirror of
https://github.com/pretix/pretix.git
synced 2026-05-06 15:24:02 +00:00
Add a user guide on payments
This commit is contained in:
@@ -1,27 +0,0 @@
|
||||
from django import template
|
||||
from django.http import Http404
|
||||
from django.shortcuts import render
|
||||
from django.views.generic import View
|
||||
|
||||
from pretix.base.models import Organizer
|
||||
|
||||
|
||||
class HelpView(View):
|
||||
model = Organizer
|
||||
context_object_name = 'organizers'
|
||||
template_name = 'pretixcontrol/organizers/index.html'
|
||||
paginate_by = 30
|
||||
|
||||
def get(self, request, *args, **kwargs):
|
||||
# In a security review, this came up as a possible path traversal issue. However, the URL regex
|
||||
# does not allow any dots in the argument (which forbids traversing upwards in the directory tree).
|
||||
# Even if it *was* possbile, it'd be loaded through django's template loader and therefore limited
|
||||
# to TEMPLATE_DIR.
|
||||
try:
|
||||
locale = request.LANGUAGE_CODE
|
||||
return render(request, 'pretixcontrol/help/%s.%s.html' % (kwargs.get('topic'), locale), {})
|
||||
except template.TemplateDoesNotExist:
|
||||
try:
|
||||
return render(request, 'pretixcontrol/help/%s.html' % kwargs.get('topic'), {})
|
||||
except template.TemplateDoesNotExist:
|
||||
raise Http404('')
|
||||
Reference in New Issue
Block a user