Commit Graph
647 Commits
Author SHA1 Message Date
Raphael Michel 022ca8ad6c [SECURITY] Fix XSS injection vulnerabilities in question answers, event, quota and product names 2017-08-21 14:53:19 +02:00
Raphael Michel 5049da95b5 [SECURITY] Use defusedcsv for exports 2017-08-21 14:52:31 +02:00
Raphael Michel c78ca8bc00 [SECURITY] Rewrite all links in rich texts 2017-08-21 14:51:21 +02:00
Raphael Michel 3fa39798e5 Fix test failures 2017-06-29 18:03:16 +02:00
Raphael Michel 2add8d671a Unify all calls to register_payment_providers 2017-06-29 12:09:48 +02:00
Raphael Michel d5d1fcf331 Add PaymentProvider.public_name 2017-06-29 11:44:27 +02:00
Raphael Michel ea970be6f2 Allow to generate random slugs 2017-06-28 18:20:06 +02:00
Raphael Michel 424b7964b4 Move some links to their own templates 2017-06-27 18:22:27 +02:00
Raphael Michel 433512a256 Optionally ask for email addresses twice 2017-06-26 17:06:20 +02:00
Raphael Michel d3a84690f2 Add QuotaListExporter 2017-06-26 16:50:16 +02:00
Raphael Michel e1bdfd7e4e Allow headlines with markdown 2017-06-22 15:53:30 +02:00
Tydon KandRaphael Michel 5584c12d0a Fixed typo in Helptext (#530) 2017-06-22 10:35:56 +02:00
Raphael Michel 02d2b88a54 Extend validator blacklist 2017-06-19 17:47:13 +02:00
Raphael Michel 123d2f6120 Allow to add positions to an existing order 2017-06-19 15:22:57 +02:00
Raphael Michel 374cf08086 Mention offending item in QuotaExceededException message 2017-06-19 13:23:37 +02:00
Raphael MichelandGitHub b2d4bea1d0 Refs #314 -- Read-only REST API (#513)
* initial commit

* API auth

* Hierarchical URLs

* Add session auth

* Strong hierarchy

* Add filters

* Add i18n fields, questions

* More viewsets and serializers

* Ticket download

* Add OrderPosition serializer

* View-level permissions

* More tests

* More tests

* Add basic API docs

* Add REST API to docs frontpage

* Tests for order endpoints

* Add invoice tests

* Voucher and waitinglist tests

* Doc draft

* order docs

* Docs on all viewsets

* Disable DRF docs, style sphinx, style browsable API

* Fix tests

* deprecated imports

* Test foo

* Attendee names

* Fix migration problems

* Remove browsable API, plugin integration

* Doc fixes
2017-06-19 11:16:04 +02:00
Tobias KunzeandRaphael Michel 6df3a7d4b5 Order vouchers by code by default (#525) 2017-06-18 18:31:54 +02:00
Tobias KunzeandRaphael Michel f7de2ead40 Allow to pass prefix to generate_code, too (#523) 2017-06-18 18:30:38 +02:00
Tobias KunzeandRaphael Michel 8fa490c938 Allow to add a prefix when generating voucher codes (#518) 2017-06-16 23:21:23 +02:00
Raphael Michel 6f7281b0f5 Add organizer domain 2017-06-05 18:07:18 +02:00
AV-roomandRaphael Michel caf75fafdf Fix #454 -- Email field is now required on user settings page (#511) 2017-06-02 17:42:42 +02:00
Raphael Michel 78a8a7d744 Add Order.meta_info_data 2017-05-23 12:38:00 +02:00
Raphael Michel 8ff2c42070 Fix order changing with zero-priced products 2017-05-22 21:13:05 +02:00
Raphael Michel c5d18c6884 Clear settings cache after migration 2017-05-22 14:17:52 +02:00
Heok Hong LowandRaphael Michel 48b3621f1e Fix #499 -- Refactor paymentinfo to payment_info (#501)
* Refactor paymentinfo to payment_info, resolve #499

* Fix calling of object attribute on tuple

* Minor update to setup documentation

* Do not use short words for typochecks

* Text clarification

* Refactor paymentinfo to payment_info, resolve #499

* Include data migration for existing event settings, resolve #499
2017-05-22 14:06:19 +02:00
scabuxandRaphael Michel b5a2123d1c Added configurable text for organizer page (#494) 2017-05-17 15:53:30 +02:00
Raphael Michel 7769aaccea Fix #492 -- Force deterministic ordering of some signals 2017-05-15 13:09:23 +02:00
Raphael Michel 127086a50e Fix bug that lead to wrong payment amount when switching payment method to PayPal later 2017-05-10 19:12:55 +02:00
Raphael Michel aac05727ed Multi-line location field, new field for admission time 2017-05-10 12:58:57 +02:00
Raphael Michel 0d3f5e0c32 Fix #41 -- Drag-and-drop ticket editor
Undo/redo

Useful toolbox

Font selection

Add text content

Use hex for colors

JS-side dump and load

Save

Load layout, proper undo/redo

First steps to Python rendering

More PDF rendering

Copy and paste

Buttons for keyboard actions

Splash Screen

Block unbeforeunload in dirty state

Remove debugging output

Preview

Upload new PDFs via the editor

Fix bugs during PDF reload, link in settings form

New default ticket

Add OpenSans BI

Custom fonts, fix tests
2017-05-09 11:10:10 +02:00
scabuxandRaphael Michel 27d6f24c3c Mail signature (#485)
* added signature field -- no function yet

* added mail signature feature

* fixed style issue

* fixed problem with signature default

* added unit test for mail signatures

* added unit test for mail signatures
2017-05-06 11:12:38 +02:00
Ian WilliamsandRaphael Michel d929b163db Fix #456 -- Allow products to be excluded from ticket-generation (#483)
* Added non-admission setting to event

`ticket_download_nonadm` now setting in storage. Still need logic for
order page/PDF generation.
Works on pretix/pretix#456.

* Download button considers `ticket_download_nonadm`

Modified Django tags to look at item admission attribute and
`ticket_download_nonadm` setting.
Works on pretix/pretix#456.

* Ticket output for non-admission disabled

PDFs/etc. will only be permitted/generated for items with the
`admission` attribute, or if the `ticket_download_nonadm` event setting
is true. Applies to single and whole-order ticket downloads.
Works on pretix/pretix#456.

* Fixed product exclusion in PDF output

Forgot PDF output was a plugin, now includes same check as base
`BaseTicketOutput.generate_order`.
Works on pretix/pretix#456
2017-05-06 11:11:11 +02:00
Raphael Michel d8eba81efc Add idempotenty nonces to pretixdroid API 2017-05-04 09:32:36 +02:00
Raphael Michel c719adf235 Fix typo in method name 2017-05-03 17:11:55 +02:00
Raphael MichelandGitHub d08a0bdb00 Refs #39 -- New concept of "teams" (#478)
* New models

* CRUD UI

* UI for adding/removing team members

* Log display for teams

* Fix invitations, move frontend

* Drop old models (incomplete)

* Drop more old stuff

* Drop even more old stuff

* Fix tests

* Fix permission test

* flake8 fix

* Add tests fore the new code

* Rebase migrations
2017-05-03 16:55:37 +02:00
Raphael Michel 2fcd561ff7 Add a user guide on payments 2017-05-02 18:59:18 +02:00
Raphael Michel 7509bf69ca Squash migrations and bump version 2017-05-02 11:07:15 +02:00
Raphael Michel 48a933b757 Copy from event: deal with deleted items 2017-05-02 09:58:26 +02:00
Raphael Michel 6c02bf73b5 Allow <br> tags in rich text 2017-05-02 09:52:46 +02:00
Raphael Michel d389e4390f Add variation descriptions and allow to order addons 2017-05-02 00:12:22 +02:00
Raphael Michel 82f9f5027f Fix incorrect heading of CSV file 2017-04-27 18:23:16 +02:00
Raphael Michel 4f015f1d96 Replace organizer_edit_tabs by nav_organizer 2017-04-27 10:00:09 +02:00
Raphael Michel bbe272c35c Fix #372 -- Plugin hook for "Copy from event" 2017-04-26 15:24:16 +02:00
Tobias KunzeandRaphael Michel 010c31cf10 Fix type annotation 2017-04-25 09:10:45 +02:00
Raphael Michel d1643b4506 Refs #471 -- Additional event filter on quota calculation 2017-04-22 11:47:25 +02:00
Raphael Michel 2c96a26d91 Fix missing attributes in copying products 2017-04-21 15:07:32 +02:00
Raphael Michel 5a68eb345f Fix broken language field filtering in payment settings 2017-04-21 14:26:19 +02:00
Raphael Michel 0b068f6d79 Copy add-ons during event cloning 2017-04-18 20:31:16 +02:00
Raphael Michel b52f2f5a9e Improve add-on products 2017-04-17 14:54:15 +02:00
Raphael Michel 5bcfb958f0 Simpler API for cart removal 2017-04-17 14:54:15 +02:00