Vouchers: Don't allow to generate more than 100k random codes at once

2026-05-07 15:34:02 +00:00 · 2023-07-10 15:11:49 +02:00
parent 8a9f14db03
commit f4203b7408
3 changed files with 5 additions and 1 deletions
--- a/src/pretix/control/views/vouchers.py
+++ b/src/pretix/control/views/vouchers.py
@@ -569,6 +569,8 @@ class VoucherRNG(EventPermissionRequiredMixin, View):
    def get(self, request, *args, **kwargs):
        try:
            num = int(request.GET.get('num', '5'))
+            if num > 100_000:
+                return HttpResponseBadRequest()
        except ValueError:  # NOQA
            return HttpResponseBadRequest()