CGM_Public/pretix_original
2
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-04 09:47:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,667 Commits 377 Branches 211 Tags
eb29101d0982f82a01f42e7370cfecf5669a1c2e
Commit Graph
42 Commits
Author SHA1 Message Date
Raphael MichelGitHubrobbi5
 		eb29101d09 Allow more decimal places for tax rates (#6092) 
* Allow more decimal places for tax rates

* Fix normalization

* More tax rate handling

* Add uncommitted tests

* Rebase migration

* Update src/pretix/base/migrations/0304_tax_rate_decimals.py

Co-authored-by: robbi5 <richt@rami.io>

---------

Co-authored-by: robbi5 <richt@rami.io>
 2026-07-15 16:20:45 +02:00
Puneet DixitGitHubPuneet DixitRaphael Michel
 		3270c4e583 Bank transfer: Fix incorrect HTML escaping in QR Code (fix #4780) (#6201) 
* Fix EPC QR beneficiary escaping

* Fix EPC QR script encoding

Keep EPC QR helper output as a plain string and serialize payment QR payloads as JSON script data before the QR replacement JavaScript parses them. This preserves apostrophes without relying on mark_safe in the helper.

Assisted-by: OpenAI GPT-5 <noreply@openai.com>

* "type safety"

---------

Co-authored-by: Puneet Dixit <236133619+puneetdixit200@users.noreply.github.com>
Co-authored-by: Raphael Michel <michel@rami.io>
 2026-07-06 12:52:29 +02:00
Raphael MichelGitHubpajowu
 		1f5fe1b237 SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468) (#6260) 
* SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468)

* SMTP SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (#6264)

---------

Co-authored-by: pajowu <engelhardt@pretix.eu>
 2026-06-26 16:45:20 +02:00
Raphael MichelandRaphael Michel eb068f524c [SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535) 2026-06-25 16:46:13 +02:00
Raphael MichelandRaphael Michel f615595547 [SECURITY] Disable outbound and file access for reportlab (CVE-2026-57535) 2026-06-25 16:46:13 +02:00
Raphael MichelandGitHub 5db1a5b8af Rename confusingly named helpers for URL generation (#6280) 
* Rename confusingly named helpers for URL generation

* new name

* fix old call

* Revert "new name"

This reverts commit a6e9a488b6.

* New name
 2026-06-22 09:11:55 +02:00
Raphael MichelandGitHub a75dbb5d62 SSRF protection: Block requests to CGNAT addresses (Z#23235334) (#6220) 2026-05-27 16:45:11 +02:00
Raphael MichelandRaphael Michel bb450e1be9 Add default protection for SSRF 2026-04-10 10:34:15 +02:00
Raphael Michel 43c6c33bd8 SafeFormatter: Ignore conversion spec 2026-02-13 12:35:49 +01:00
Raphael Michel 059179aecb Fix babel locale discovery for zh_Hans_US 2026-01-23 11:36:12 +01:00
Raphael MichelandGitHub de9045afcf Allow to combine language variant with region (fixes #3947, Z#23220951) (#5814) 
* Allow to combine language variant with region (fixes #3947, Z#23220951)

This only affects babel-based formatting (currently: currencies and phone numbers),
**not** Django-based formatting (currently: date and time formats).

* Remove tests where I don'T actually know whats right

* Fix lookup order
 2026-01-16 17:08:46 +01:00
luelistaandGitHub e1f5678d7c Refactor payment QR code generation code and add SPAYD format (#5680) 
Move generation of QR code contents out of the HTML template and into Python code, so it can
be reused in plugins and tested with unit tests. Add the SPAYD QR code format which is used in
Czech Republic and Slovakia [1]. Display BezahlCode QR codes only for German IBANs.

[1] https://en.wikipedia.org/wiki/Short_Payment_Descriptor
 2025-12-04 14:15:29 +01:00
Raphael Michelandluelista fdd34f387a [SECURITY] Prevent HTML injection through placeholders in emails 
Co-authored-by: luelista <weller@pretix.eu>
 2025-11-27 11:41:27 +01:00
Raphael MichelandGitHub 6190b93f89 Stop using ordinal numbers in English date represenation (Z#23210534) (#5539) 
* Stop using ordinal numbers in English date represenation (Z#23210534)

* ADjust more tests
 2025-10-15 09:06:54 +02:00
Raphael MichelandGitHub 177a7d07fc Update license header (#5540) 2025-10-10 15:32:46 +02:00
Richard SchreiberandGitHub 1a1948e3fa [A11y] Improve HTML-output for date-ranges 2025-03-27 13:21:25 +01:00
Raphael MichelGitHubMira
 		2dc625cf31 Add the option to introduce rich-text placeholders (#4657) 
* Add the option to introduce rich-text placeholders

* Add tests in test_format

* Add some css

* Block vs inline

* Some fixed css

* Update src/pretix/control/forms/event.py

Co-authored-by: Mira <weller@rami.io>

* Add missing docstring prat

---------

Co-authored-by: Mira <weller@rami.io>
 2024-12-03 11:38:15 +01:00
MiraandGitHub 91e69f793d Show weekday in subevent dates [Z#23161884] (#4383) 2024-08-27 22:22:44 +02:00
Raphael Michel 53e1d9c6c4 Tests: Fix improper cleanup of SITE_URL 2023-08-10 11:20:26 +02:00
Raphael MichelandGitHub bd32b33ba9 Bump Django to 4.1.* (#2989) 2023-06-05 09:56:31 +02:00
Raphael MichelandGitHub f63408504e Allow to define ticket validity through a product (#3105) 2023-02-13 14:46:52 +01:00
Raphael Michel 247a61489f XLSX generation: Remove invalid unicode characters 2022-12-09 17:41:33 +01:00
Raphael Michel 28e529995d Add missing license headers 2022-12-09 13:24:17 +01:00
Raphael MichelandGitHub b64c5735a8 Make str.format_map with untrusted input safer (#2931) 2022-12-08 13:49:07 +01:00
Raphael Michel d628acc62a Remove left-over debug statements 2022-07-21 09:14:38 +02:00
Raphael Michel 482968175b [SECURITY] Prevent untrusted values from creating Excel formulas 2022-02-28 16:06:47 +01:00
Richard SchreiberGitHubRaphael MichelRaphael Michel
 		3dcfa57b70 A11y improvements (#2081) 
Co-authored-by: Raphael Michel <michel@rami.io>
Co-authored-by: Raphael Michel <mail@raphaelmichel.de>
 2021-10-17 16:56:16 +02:00
Raphael Michel 4be618bc93 Thumbnailing: Redefine min-size as exact-size 2021-07-26 15:53:21 +02:00
Richard SchreiberandGitHub 0c6971ff5f Email: make responsive and show header image in MS Outlook (#2138) 2021-07-01 11:49:30 +02:00
Raphael Michel 5e9865379d Remove debugging statement 2021-05-10 15:15:24 +02:00
Raphael MichelGitHubRichard Schreiber
 		b5fdba796b Check-in rules: Make logic results understandable (#2050) 
Co-authored-by: Richard Schreiber <schreiber@rami.io>
 2021-05-07 09:45:18 +02:00
Raphael MichelandGitHub a93287207b pretix Community Edition moves to AGPLv3-based license (#2023) 2021-04-12 10:33:47 +02:00
Raphael MichelandGitHub 04bfa63a5e Add region setting to supplement localization (#1875) 2020-12-14 13:15:38 +01:00
Raphael MichelandGitHub c056db46b6 Overhaul of our check-in features (#1647) 2020-05-13 18:01:49 +02:00
Alvaro Enrique RuanoandRaphael Michel 1edcd47703 Support for daterange in spanish (#1125) 2018-12-17 22:32:15 +01:00
Raphael MichelandGitHub afd766999c Upgrade to Django 2.1 (#710) 
* Upgrade to Django 2.0

* more models

* i18n foo

* Update setup.py

* Fix Sentry exception PRETIXEU-JC

* Enforce slug uniqueness

* Import sorting

* Upgrade to Django 2.1

* Travis config

* Try to fix PostgreSQL failure

* Smaller test matrix

* staticfiles→static

* Include request in all authenticate() calls
 2018-08-06 12:48:46 +02:00
Raphael Michel 1ee6e31538 Fix #190 and #472 -- Change of questions within pretix control 2018-01-26 12:43:47 +01:00
Raphael Michel aac05727ed Multi-line location field, new field for admission time 2017-05-10 12:58:57 +02:00
scabuxandRaphael Michel 1b2895b0ca Fixed bugs and added test for date range rendering (#488) 
* fixed bug for same dates, added unit check for daterange

* fixed local language override in unit test
 2017-05-07 10:40:36 +02:00
Raphael Michel e828d711bd Used isort to order all import statements 2015-07-19 20:46:34 +02:00
Raphael Michel d6d63f826f Changed some texts 2015-06-21 21:37:39 +02:00
Raphael Michel fa94d17d74 Fixed absolute URLs (now for real) 2015-06-21 21:15:12 +02:00