Raphael Michel
9f263fbe4f
Hotfix linkified placeholders ( #5663 )
...
* Fix linkify placeholders
* Add URL test
2025-11-27 13:20:13 +01:00
Raphael Michel
fdd34f387a
[SECURITY] Prevent HTML injection through placeholders in emails
...
Co-authored-by: luelista <weller@pretix.eu >
2025-11-27 11:41:27 +01:00
Raphael Michel
177a7d07fc
Update license header ( #5540 )
2025-10-10 15:32:46 +02:00
Raphael Michel
2dc625cf31
Add the option to introduce rich-text placeholders ( #4657 )
...
* Add the option to introduce rich-text placeholders
* Add tests in test_format
* Add some css
* Block vs inline
* Some fixed css
* Update src/pretix/control/forms/event.py
Co-authored-by: Mira <weller@rami.io >
* Add missing docstring prat
---------
Co-authored-by: Mira <weller@rami.io >
2024-12-03 11:38:15 +01:00
Mira
dd6ebd7a48
Improve validation of email templates ( #4184 )
...
* Improve validation of email templates
* simplify SafeFormatter (skip attribute access code path altogether instead of blocklisting characters)
* let SafeFormatter optionally raise on missing key
* simplify placeholder validation
* rename parameter
* Remove unused import
---------
Co-authored-by: Raphael Michel <michel@rami.io >
2024-06-10 16:41:52 +02:00
Raphael Michel
28e529995d
Add missing license headers
2022-12-09 13:24:17 +01:00
Raphael Michel
b64c5735a8
Make str.format_map with untrusted input safer ( #2931 )
2022-12-08 13:49:07 +01:00
