Raphael Michel
e0c7dedc12
Fix placeholder injection with django templates
2026-02-13 13:35:49 +01:00
Raphael Michel
004e8e9895
SafeFormatter: Ignore conversion spec
2026-02-13 12:57:27 +01:00
Raphael Michel
a6d76a3453
Mark strings as formatted to prevent double-formatting
2026-02-13 12:57:27 +01:00
Kara Engelhardt
f1625dd8b1
SECURITY: Prevent placeholder injcetion in plaintext emails
2026-02-13 12:43:40 +01:00
Raphael Michel
72ddc08290
Bump version to 2025.9.3
v2025.9.3
2025-12-19 13:06:00 +01:00
Raphael Michel
14473b64ba
[SECURITY] Prevent access to arbitrary cached files by UUID (CVE-2025-14881)
2025-12-19 13:05:46 +01:00
Raphael Michel
177f9e3c9d
Bump to 2025.9.2
v2025.9.2
2025-11-27 13:22:11 +01:00
Raphael Michel
ed5b160a05
Hotfix linkified placeholders ( #5663 )
...
* Fix linkify placeholders
* Add URL test
2025-11-27 13:21:35 +01:00
Raphael Michel
b04afda883
Bump to 2025.9.1
v2025.9.1
2025-11-27 11:54:00 +01:00
Raphael Michel
fbfae9ed19
[SECURITY] Prevent HTML injection through placeholders in emails
...
Co-authored-by: luelista <weller@pretix.eu >
2025-11-27 11:53:54 +01:00
Raphael Michel
0d07615006
Bump version to 2025.9.0
v2025.9.0
2025-10-30 09:53:03 +01:00
Raphael Michel
1fbf75d89f
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (254 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/de_Informal/
powered by weblate
2025-10-29 11:29:20 +01:00
Raphael Michel
f38c36c034
Translations: Update German
...
Currently translated at 100.0% (254 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/de/
powered by weblate
2025-10-29 11:29:20 +01:00
Raphael Michel
1488960c54
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (6114 of 6114 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2025-10-29 11:29:20 +01:00
Raphael Michel
9655f3d15d
Translations: Update German
...
Currently translated at 100.0% (6114 of 6114 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/
powered by weblate
2025-10-29 11:29:20 +01:00
Raphael Michel
4ef01df9ea
Translations: Update wordlist
2025-10-29 10:50:57 +01:00
Raphael Michel
7ce2d7ccb4
Docs: Fix a formatting issue
2025-10-29 10:50:50 +01:00
Raphael Michel
04fae9ea14
Fix code style issue
2025-10-29 10:17:43 +01:00
Raphael Michel
4b9f1712f0
Markdown link parser: Fix fediverse URLs and URLs with user or path ( #5563 )
2025-10-29 10:01:05 +01:00
Raphael Michel
9461ac27f9
Update po files
...
[CI skip]
Signed-off-by: Raphael Michel <michel@rami.io >
2025-10-29 08:55:10 +01:00
Raphael Michel
1e0ede529c
Event cancellation: Add safety and security checks ( #5565 )
...
* Event cancellation: Add safety and security checks
When cancelling an event, a large sum of money might be refunded
instantly. This PR adds safety features around this by
- doing a dry-run first that shows a preview of the expected refund sum
- sending a confirmation mode via email for any automatic refunds of more than 100 currency units
- keeping a more detailed log of the settings this was executed with
* Update src/pretix/control/views/orders.py
Co-authored-by: luelista <weller@rami.io >
---------
Co-authored-by: luelista <weller@rami.io >
2025-10-29 08:53:48 +01:00
Sven Muhlen
e386ed4352
Translations: Update Luxembourgish
...
Currently translated at 26.8% (1639 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/lb/
powered by weblate
2025-10-29 08:51:52 +01:00
Sven Muhlen
8676033fe1
Translations: Update Luxembourgish
...
Currently translated at 100.0% (254 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/lb/
powered by weblate
2025-10-29 08:51:52 +01:00
Núria Masclans
b9ca68c0be
Translations: Update Catalan
...
Currently translated at 62.2% (158 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/ca/
powered by weblate
2025-10-29 08:51:52 +01:00
Sven Muhlen
b2aca033e0
Translations: Update Luxembourgish
...
Currently translated at 20.4% (1247 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/lb/
powered by weblate
2025-10-29 08:51:52 +01:00
Sven Muhlen
2d0b657d0f
Translations: Update Luxembourgish
...
Currently translated at 100.0% (254 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/lb/
powered by weblate
2025-10-29 08:51:52 +01:00
Hijiri Umemoto
d54807073a
Translations: Update Japanese
...
Currently translated at 100.0% (254 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/ja/
powered by weblate
2025-10-29 08:51:52 +01:00
Yasunobu YesNo Kawaguchi
ca1efc0a58
Translations: Update Japanese
...
Currently translated at 100.0% (6094 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/
powered by weblate
2025-10-29 08:51:52 +01:00
Jan Van Haver
3746077881
Translations: Update Dutch
...
Currently translated at 97.6% (5952 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl/
powered by weblate
2025-10-29 08:51:52 +01:00
CVZ-es
04075cfc45
Translations: Update Spanish
...
Currently translated at 100.0% (254 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/es/
powered by weblate
2025-10-29 08:51:52 +01:00
CVZ-es
bdd47ee32b
Translations: Update Spanish
...
Currently translated at 100.0% (6094 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/
powered by weblate
2025-10-29 08:51:52 +01:00
CVZ-es
ff42c1fe5c
Translations: Update French
...
Currently translated at 100.0% (254 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/fr/
powered by weblate
2025-10-29 08:51:52 +01:00
CVZ-es
0ba5c0c143
Translations: Update French
...
Currently translated at 100.0% (6094 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/
powered by weblate
2025-10-29 08:51:52 +01:00
Sven Muhlen
f6aa17a0ff
Translations: Update Luxembourgish
...
Currently translated at 16.5% (1007 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/lb/
powered by weblate
2025-10-29 08:51:52 +01:00
Sven Muhlen
5882a728bf
Translations: Update Luxembourgish
...
Currently translated at 100.0% (254 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/lb/
powered by weblate
2025-10-29 08:51:52 +01:00
Mira Weller
11acd4ca53
allow custom headers in error base template
2025-10-24 12:04:03 +02:00
Raphael Michel
40db7d939f
API: Trust discounts assigned by pretixPOS, do not assign differently ( #5531 )
2025-10-21 18:35:06 +02:00
Martin Gross
5563183255
Allow to unlock a payment method and redeem a voucher at the same time ( #5564 )
2025-10-21 17:28:33 +02:00
dependabot[bot]
dfd52f05ff
Update sepaxml requirement from ==2.6.* to ==2.7.* ( #5431 )
...
Updates the requirements on [sepaxml](https://github.com/raphaelm/python-sepaxml ) to permit the latest version.
- [Commits](https://github.com/raphaelm/python-sepaxml/compare/2.6.0...2.7.0 )
---
updated-dependencies:
- dependency-name: sepaxml
dependency-version: 2.7.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Raphael Michel <michel@pretix.eu >
2025-10-21 10:54:46 +02:00
jasle
15ea7c65e4
Bank transfer: Allow markdown in accoutn details
2025-10-21 10:54:39 +02:00
Raphael Michel
0ab633ce7b
Email layouts: Fix margin-left of details table
2025-10-21 10:24:06 +02:00
Sven Muhlen
cd0c6b2b0f
Translations: Update Luxembourgish
...
Currently translated at 0.1% (5 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/lb/
powered by weblate
2025-10-21 10:12:33 +02:00
Raphael Michel
d7be7dc1c3
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (6094 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2025-10-21 10:12:33 +02:00
Sven Muhlen
aa1044cf91
Translations: Update Luxembourgish
...
Currently translated at 0.1% (4 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/lb/
powered by weblate
2025-10-21 10:12:33 +02:00
Sven Muhlen
3df5c890a8
Translations: Update Luxembourgish
...
Currently translated at 17.3% (44 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/lb/
powered by weblate
2025-10-21 10:12:33 +02:00
Raphael Michel
0775d09df4
Translations: Update German (informal) (de_Informal)
...
Currently translated at 99.9% (6093 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2025-10-21 10:12:33 +02:00
Raphael Michel
bccfefecf1
Translations: Update German
...
Currently translated at 100.0% (6094 of 6094 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/
powered by weblate
2025-10-21 10:12:33 +02:00
Sven Muhlen
a78c8c910f
Translations: Update Luxembourgish
...
Currently translated at 1.9% (5 of 254 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/lb/
powered by weblate
2025-10-21 10:12:33 +02:00
Sven Muhlen
cdc265c409
Translations: Add Luxembourgish
2025-10-21 10:12:33 +02:00
Sven Muhlen
0f230be785
Translations: Add Luxembourgish
2025-10-21 10:12:33 +02:00