From d1971cdcae04034f454a5c7591062e6261c0bdf4 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Sun, 29 Oct 2017 00:55:42 +0200 Subject: [PATCH] Clarify docstring --- src/pretix/presale/views/cart.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/pretix/presale/views/cart.py b/src/pretix/presale/views/cart.py index 0074947548..8b1a82adae 100644 --- a/src/pretix/presale/views/cart.py +++ b/src/pretix/presale/views/cart.py @@ -211,6 +211,9 @@ def get_or_create_cart_id(request): widget (e.g. /orga/event/w/mysecretnonce123/cart/add) that are not already unguessable (like /orga/event/orders/ABCDE/secret123465456/). + The actual cart IDs for those namespaced carts will then be stored at + request.session['current_cart_event_42_mysecretnonce123']. + However, we still need to work around the issue that we can't use Access-Control-Allow-Credentials but want to invoke /cart/add via a cross-origin request. This leads to /cart/add creating a new cart session every time it is invoked cross-origin by default. We solve this by returning the newly