From ec444e5bf33434ddeda3e0de949bec38d4d33655 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Fri, 2 Jul 2021 10:04:05 +0200 Subject: [PATCH] Invoice: Show preview in browser during rebugging --- src/pretix/control/views/event.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/pretix/control/views/event.py b/src/pretix/control/views/event.py index 5760f185f5..e496aefc82 100644 --- a/src/pretix/control/views/event.py +++ b/src/pretix/control/views/event.py @@ -587,7 +587,12 @@ class InvoicePreview(EventPermissionRequiredMixin, View): def get(self, request, *args, **kwargs): fname, ftype, fcontent = build_preview_invoice_pdf(request.event) resp = HttpResponse(fcontent, content_type=ftype) - resp['Content-Disposition'] = 'attachment; filename="{}"'.format(fname) + if settings.DEBUG: + # attachment is more secure as we're dealing with user-generated stuff here, but inline is much more convenient during debugging + resp['Content-Disposition'] = 'inline; filename="{}"'.format(fname) + resp._csp_ignore = True + else: + resp['Content-Disposition'] = 'attachment; filename="{}"'.format(fname) return resp