 Raphael Michel
|
022ca8ad6c
|
[SECURITY] Fix XSS injection vulnerabilities in question answers, event, quota and product names
|
2017-08-21 14:53:19 +02:00 |
|
|
Raphael Michel
|
5e37fbb4ef
|
[SECURITY] Update to morris.js master to fix a XSS vulnerability
|
2017-08-21 14:52:41 +02:00 |
|
|
Raphael Michel
|
5049da95b5
|
[SECURITY] Use defusedcsv for exports
|
2017-08-21 14:52:31 +02:00 |
|
|
Raphael Michel
|
c78ca8bc00
|
[SECURITY] Rewrite all links in rich texts
|
2017-08-21 14:51:21 +02:00 |
|
|
Raphael Michel
|
c40e0bfdff
|
[SECURITY] Fix XSS vulnerability in typeahead.js
|
2017-08-21 14:51:21 +02:00 |
|
|
Raphael Michel
|
ea79ebf105
|
[SECURITY] Fix XSS vulnerability in Lightbox caption
|
2017-08-21 14:51:00 +02:00 |
|
|
Raphael Michel
|
d4b9906638
|
Fix syntax error in setup.py
|
2017-07-02 18:57:10 +02:00 |
|
|
Raphael Michel
|
c1c4133ac6
|
Bump to 1.5.1
|
2017-07-02 18:45:00 +02:00 |
|
|
Raphael Michel
|
ff3e127648
|
Fix missing dependencies in setup.py
|
2017-07-02 18:44:39 +02:00 |
|
|
Raphael Michel
|
970b861947
|
Fix import in unit test
|
2017-07-02 17:36:38 +02:00 |
|
|
Raphael Michel
|
5abe8a109c
|
Bump release to 1.5.0
|
2017-07-02 17:29:55 +02:00 |
|
|
Raphael Michel
|
ee6d0af795
|
Update translations
|
2017-07-02 17:26:32 +02:00 |
|
|
Raphael Michel
|
0dc82b6a28
|
Add answers to REST API
|
2017-07-02 16:34:55 +02:00 |
|
|
Raphael Michel
|
a530eda9fc
|
Add CSRF_TRUSTED_ORIGINS to settings.py
|
2017-06-30 11:55:59 +02:00 |
|
|
Raphael Michel
|
3fa39798e5
|
Fix test failures
|
2017-06-29 18:03:16 +02:00 |
|
|
Raphael Michel
|
b7f8832633
|
Fix test_order_list
|
2017-06-29 12:11:20 +02:00 |
|
|
Raphael Michel
|
2add8d671a
|
Unify all calls to register_payment_providers
|
2017-06-29 12:09:48 +02:00 |
|
|
Raphael Michel
|
d5d1fcf331
|
Add PaymentProvider.public_name
|
2017-06-29 11:44:27 +02:00 |
|
|
Raphael Michel
|
9007501d81
|
Collappse payment provider settings by default
|
2017-06-29 11:40:17 +02:00 |
|
|
Raphael Michel
|
fc12a8f549
|
Relabel button.
|
2017-06-28 18:57:50 +02:00 |
|
|
Raphael Michel
|
86f03b3399
|
Fix #532: Ticket editor, moving element groups
|
2017-06-28 18:55:33 +02:00 |
|
|
Raphael Michel
|
80ad0e7f68
|
PDF editor: share source code
|
2017-06-28 18:36:45 +02:00 |
|
|
Raphael Michel
|
ea970be6f2
|
Allow to generate random slugs
|
2017-06-28 18:20:06 +02:00 |
|
|
Raphael Michel
|
4bd0b96a2d
|
Order list of events descending
|
2017-06-28 17:59:07 +02:00 |
|
|
Raphael Michel
|
c7f0436ec0
|
Filter list of events
|
2017-06-28 17:57:15 +02:00 |
|
|
Raphael Michel
|
ecc788fd79
|
Invoice name in order list
|
2017-06-28 17:37:53 +02:00 |
|
|
Raphael Michel
|
8ea9d5685d
|
Use FilterForm for list of orders
|
2017-06-28 17:28:30 +02:00 |
|
|
Raphael Michel
|
c2bd2f0672
|
Add filters to the order search
|
2017-06-28 12:52:48 +02:00 |
|
|
Raphael Michel
|
424b7964b4
|
Move some links to their own templates
|
2017-06-27 18:22:27 +02:00 |
|
|
Raphael Michel
|
98394fdc63
|
Fix test failing on MySQL
|
2017-06-27 16:56:10 +02:00 |
|
|
Raphael Michel
|
625e90518e
|
Add banktransfer API
|
2017-06-27 12:31:56 +02:00 |
|
|
Raphael Michel
|
d446191cf4
|
Organizer-level bank import
|
2017-06-27 12:31:45 +02:00 |
|
|
Raphael Michel
|
ea2557274f
|
Show "create team" button to everyone who can
|
2017-06-27 08:58:54 +02:00 |
|
|
Raphael Michel
|
1bcca566ab
|
Remove SVG from supported files for invoice generation
|
2017-06-26 19:15:13 +02:00 |
|
|
Raphael Michel
|
cf365635ef
|
Correct pluralization for addon help texts
|
2017-06-26 17:29:39 +02:00 |
|
|
Raphael Michel
|
df6a93da5f
|
Update translation
|
2017-06-26 17:08:52 +02:00 |
|
|
Raphael Michel
|
433512a256
|
Optionally ask for email addresses twice
|
2017-06-26 17:06:20 +02:00 |
|
|
Raphael Michel
|
e0fe78b82e
|
Fix typocheck problem
|
2017-06-26 17:00:16 +02:00 |
|
|
Raphael Michel
|
d3a84690f2
|
Add QuotaListExporter
|
2017-06-26 16:50:16 +02:00 |
|
|
Raphael Michel
|
3df4b4dc57
|
Update translations
|
2017-06-22 16:24:29 +02:00 |
|
|
Raphael Michel
|
b2801f3a40
|
EU legislation note
|
2017-06-22 15:53:30 +02:00 |
|
|
Raphael Michel
|
e1bdfd7e4e
|
Allow headlines with markdown
|
2017-06-22 15:53:30 +02:00 |
|
|
Tydon KandRaphael Michel
|
5584c12d0a
|
Fixed typo in Helptext (#530)
|
2017-06-22 10:35:56 +02:00 |
|
|
Raphael Michel
|
91bd02157c
|
Avoid word wrap inside event date
|
2017-06-21 15:44:42 +02:00 |
|
|
Raphael Michel
|
02d2b88a54
|
Extend validator blacklist
|
2017-06-19 17:47:13 +02:00 |
|
|
Raphael Michel
|
6ae5c5e6ce
|
Fix tests failing after last commit
|
2017-06-19 16:17:08 +02:00 |
|
|
Raphael Michel
|
123d2f6120
|
Allow to add positions to an existing order
|
2017-06-19 15:22:57 +02:00 |
|
|
Raphael Michel
|
b21a928028
|
Add API endpoint for Quota.availability
|
2017-06-19 13:57:58 +02:00 |
|
|
Raphael Michel
|
374cf08086
|
Mention offending item in QuotaExceededException message
|
2017-06-19 13:23:37 +02:00 |
|
|
Raphael MichelandGitHub
|
b2d4bea1d0
|
Refs #314 -- Read-only REST API (#513)
* initial commit
* API auth
* Hierarchical URLs
* Add session auth
* Strong hierarchy
* Add filters
* Add i18n fields, questions
* More viewsets and serializers
* Ticket download
* Add OrderPosition serializer
* View-level permissions
* More tests
* More tests
* Add basic API docs
* Add REST API to docs frontpage
* Tests for order endpoints
* Add invoice tests
* Voucher and waitinglist tests
* Doc draft
* order docs
* Docs on all viewsets
* Disable DRF docs, style sphinx, style browsable API
* Fix tests
* deprecated imports
* Test foo
* Attendee names
* Fix migration problems
* Remove browsable API, plugin integration
* Doc fixes
|
2017-06-19 11:16:04 +02:00 |
|