diff --git a/src/pretix/control/views/event.py b/src/pretix/control/views/event.py index d09a833181..de0ef49731 100644 --- a/src/pretix/control/views/event.py +++ b/src/pretix/control/views/event.py @@ -746,7 +746,6 @@ class InvoicePreview(EventPermissionRequiredMixin, View): if settings.DEBUG: # attachment is more secure as we're dealing with user-generated stuff here, but inline is much more convenient during debugging resp['Content-Disposition'] = 'inline; filename="{}"'.format(fname) - resp._csp_ignore = True else: resp['Content-Disposition'] = 'attachment; filename="{}"'.format(fname) return resp diff --git a/src/pretix/control/views/global_settings.py b/src/pretix/control/views/global_settings.py index 815019bc0b..d5c6b0a55b 100644 --- a/src/pretix/control/views/global_settings.py +++ b/src/pretix/control/views/global_settings.py @@ -300,5 +300,4 @@ class SysReportView(AdministratorPermissionRequiredMixin, TemplateView): resp = HttpResponse(data) resp['Content-Type'] = mime resp['Content-Disposition'] = 'inline; filename="{}"'.format(name) - resp._csp_ignore = True return resp