From b8c0887f79af7f8289c656f6c804b1bdbc5625d3 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Tue, 7 May 2024 09:31:56 +0200 Subject: [PATCH] Widget: Fix CORS for cached JS --- src/pretix/presale/views/widget.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/pretix/presale/views/widget.py b/src/pretix/presale/views/widget.py index a1aa697873..78bb110f7c 100644 --- a/src/pretix/presale/views/widget.py +++ b/src/pretix/presale/views/widget.py @@ -173,7 +173,10 @@ def widget_js(request, lang, **kwargs): cached_js = cache.get('widget_js_data_{}'.format(lang)) if cached_js and not settings.DEBUG: - return HttpResponse(cached_js, content_type='text/javascript') + resp = HttpResponse(cached_js, content_type='text/javascript') + resp._csp_ignore = True + resp['Access-Control-Allow-Origin'] = '*' + return resp gs = GlobalSettingsObject() fname = gs.settings.get('widget_file_{}'.format(lang))