Raphael Michel
|
84d1d758c1
|
Re-add option to set user timezone
|
2017-10-13 15:55:58 +02:00 |
|
Raphael Michel
|
784f6e703c
|
CSP: Exclude PDF editor (just doesn't work in FF)
|
2017-09-28 18:44:12 +02:00 |
|
Raphael Michel
|
29b157f287
|
CSP: Add reporting endpoint
|
2017-09-28 18:43:45 +02:00 |
|
Raphael Michel
|
ab9dd32902
|
Add font-src to default CSP header
|
2017-09-25 10:19:36 +02:00 |
|
Raphael Michel
|
557a05135e
|
Allow connect-src to media domain
|
2017-08-28 09:19:42 +02:00 |
|
Raphael Michel
|
f9fcc16f54
|
Do not rely on CSP nonce support (breaks safari)
|
2017-08-23 13:36:35 +02:00 |
|
Raphael Michel
|
9a9bb92f91
|
[SECURITY] Support custom media URLs in CSP middleware
|
2017-08-21 15:14:45 +02:00 |
|
Raphael Michel
|
7c91bc2f37
|
Respect primary browser language
|
2017-07-20 11:31:34 +02:00 |
|
Raphael Michel
|
b2d4bea1d0
|
Refs #314 -- Read-only REST API (#513)
* initial commit
* API auth
* Hierarchical URLs
* Add session auth
* Strong hierarchy
* Add filters
* Add i18n fields, questions
* More viewsets and serializers
* Ticket download
* Add OrderPosition serializer
* View-level permissions
* More tests
* More tests
* Add basic API docs
* Add REST API to docs frontpage
* Tests for order endpoints
* Add invoice tests
* Voucher and waitinglist tests
* Doc draft
* order docs
* Docs on all viewsets
* Disable DRF docs, style sphinx, style browsable API
* Fix tests
* deprecated imports
* Test foo
* Attendee names
* Fix migration problems
* Remove browsable API, plugin integration
* Doc fixes
|
2017-06-19 11:16:04 +02:00 |
|
Raphael Michel
|
6f7281b0f5
|
Add organizer domain
|
2017-06-05 18:07:18 +02:00 |
|
Raphael Michel
|
ecd90da554
|
Fix syntax fuckup
|
2017-03-07 23:37:37 +01:00 |
|
Raphael Michel
|
2302dbade6
|
Even slightly more CSP refactoring
|
2017-03-07 22:30:15 +01:00 |
|
Raphael Michel
|
cbf735487f
|
Improved merging of CSP headers
|
2017-03-07 21:48:59 +01:00 |
|
Raphael Michel
|
3e318d0dcf
|
Django 1.10: User.is_authenticated is now a property
|
2016-09-27 10:25:20 +02:00 |
|
Raphael Michel
|
965428e422
|
Django 1.10: New-style middlewares
|
2016-09-27 10:00:03 +02:00 |
|
Raphael Michel
|
852e3cced7
|
SecurityMiddleware: Add child-src
|
2016-09-17 23:18:51 +02:00 |
|
Raphael Michel
|
2138faecf9
|
SecurityMiddleware: Increase CSP parser tolerance
|
2016-09-17 23:09:33 +02:00 |
|
Raphael Michel
|
84d264d626
|
Stripe: Optional support for Stripe checkout
|
2016-09-09 10:20:30 +02:00 |
|
Raphael Michel
|
99604036c2
|
Fixed broken Django error pages due to CSP headers
|
2016-07-29 20:53:51 +02:00 |
|
Raphael Michel
|
525705a912
|
Fixed problems with middleware order
|
2016-07-20 19:33:26 +02:00 |
|
Raphael Michel
|
bda0075613
|
Fixed problems with PayPal and CSP
|
2016-05-02 09:48:56 +02:00 |
|
Raphael Michel
|
10e31bdf32
|
Stripe apparently needs frame and image transport
|
2016-04-10 17:36:20 +02:00 |
|
Raphael Michel
|
02fb27fa5d
|
Externalize more resources, implement Content-Security-Policy headers
|
2016-04-10 17:30:24 +02:00 |
|
Raphael Michel
|
79ad8b40ed
|
Added python3.5-style type annotations to pretix.base
|
2015-11-04 23:39:59 +01:00 |
|
Raphael Michel
|
0b4cae07c4
|
Splitted URL configuration for main and subdomains
|
2015-10-21 18:16:17 +02:00 |
|
Raphael Michel
|
8f6b92fbf3
|
Added tests and test configuration for pretix/base
|
2015-08-25 17:18:33 +02:00 |
|
Raphael Michel
|
22b4d514d6
|
Fixed #83 -- Added an informal German translation
|
2015-08-16 14:25:14 +02:00 |
|
Raphael Michel
|
e828d711bd
|
Used isort to order all import statements
|
2015-07-19 20:46:34 +02:00 |
|
Raphael Michel
|
e073243039
|
Control: Prefer user locale over event locale
|
2015-05-27 23:30:32 +02:00 |
|
Raphael Michel
|
7a3051c22d
|
Presale: Add a language switch to the UI
|
2015-05-08 21:59:08 +02:00 |
|
Raphael Michel
|
cd0e1cb520
|
Wider usage of the settings framework (#17)
|
2015-04-01 11:54:56 +02:00 |
|
Raphael Michel
|
b8bb71d8a3
|
Reduce functional complexity (McCabe max 18 → max 12)
|
2015-03-13 01:04:53 +01:00 |
|
Raphael Michel
|
077413f41c
|
Restructure our python module. A lot.
|
2015-02-14 17:55:13 +01:00 |
|