Money representation in templates: Allow more precision (#6454)

* Money representation in templates: Allow more precision

When rendering money in templates, we used to have the following logic:

- When the decimal places fit the currency, render with Babel
- When they don't, e.g. we stored 123.67 JPY, even though there are no
  fractional Yens, render without Babel with a custom format, but render
  the fractional Yens because we'd rather *show* wrong data and make the
  bug obvious than hide it.

However, we only did that up to a prevision of two places, we never
showed more. This is still sufficient for core pretix, but we have
plugins that need to operate in fractional cents. Also, we CAN render
everything through babel for consistent formatting.

There is one **risk**: This might cause weird results on SQLite. Since
SQLite has no concept of precise decimal math, results of in-SQL
computations can sometimes experience floating point errors and show
with A LOT of decimal palces. This used to be invisible since the UI
performed the rounding. With this PR – not any more. We'll need to see
how annoying it is, but it should only affect development mode.

This PR also fixes a bug in tax_rate_format that for some reason did not
do what it was supposed to do, even though I tested it back then, weird.
Might even be a Python version thing?

* Update src/pretix/base/templatetags/money.py

Co-authored-by: pajowu <engelhardt@pretix.eu>

* Apply suggestion from @pajowu

Co-authored-by: pajowu <engelhardt@pretix.eu>

* Fix typing stuff

* Fix precision issue

---------

Co-authored-by: pajowu <engelhardt@pretix.eu>

.git-blame-ignore-revs

@@ -0,0 +1,2 @@
+# Format pre-vue code with eslint where possible (2026-09-10)
+d85e52c83ed3639e040372fd0052e842e4899d90

MANIFEST.in

@@ -16,6 +16,8 @@ recursive-include src/pretix/plugins/banktransfer/templates *
 recursive-include src/pretix/plugins/banktransfer/static *
 recursive-include src/pretix/plugins/manualpayment/templates *
 recursive-include src/pretix/plugins/manualpayment/static *
+recursive-include src/pretix/plugins/paypal/templates *
+recursive-include src/pretix/plugins/paypal/static *
 recursive-include src/pretix/plugins/paypal2/templates *
 recursive-include src/pretix/plugins/paypal2/static *
 recursive-include src/pretix/plugins/src/pretixdroid/templates *

doc/api/resources/events.rst

@@ -566,7 +566,7 @@ organizer level.
       Content-Type: application/json
 
       {
-        "imprint_url": "https://pretix.eu",
+        "region": "DE",
         …
       }
 
@@ -579,12 +579,14 @@ organizer level.
       Content-Type: application/json
 
       {
-        "imprint_url":
+        "region":
           {
-            "value": "https://pretix.eu",
-            "label": "Imprint URL",
+            "value": "DE",
+            "label": "Region",
             "readonly": false,
-            "help_text": "This should point e.g. to a part of your website that has your contact details and legal information."
+            "help_text": "Will be used to determine date and time formatting as well as default country for customer
+                          addresses and phone numbers. For formatting, this takes less priority than the language and
+                          is therefore mostly relevant for languages used in different regions globally (like English)."
           }
         },
         …
@@ -620,7 +622,7 @@ organizer level.
       Content-Type: application/json
 
       {
-        "imprint_url": "https://example.org/imprint/"
+        "region": "DE"
       }
 
    **Example response**:
@@ -632,7 +634,7 @@ organizer level.
       Content-Type: application/json
 
       {
-        "imprint_url": "https://example.org/imprint/",
+        "region": "DE",
         …
       }
 

eslint.config.mjs

@@ -8,7 +8,64 @@ import vuePug from 'eslint-plugin-vue-pug'
 
 const ignores = globalIgnores([
 	'**/node_modules',
-	'**/dist'
+	'**/dist',
+	// Vendored code
+	'src/pretix/static/leaflet',
+	'src/pretix/static/clipboard',
+	'src/pretix/static/cropper',
+	'src/pretix/static/lightbox',
+	'src/pretix/static/are-you-sure',
+	'src/pretix/static/vuejs',
+	'src/pretix/static/fontawesome',
+	'src/pretix/static/typeahead',
+	'src/pretix/static/moment',
+	'src/pretix/static/pdfjs',
+	'src/pretix/static/sortable',
+	'src/pretix/static/iframeresizer',
+	'src/pretix/static/bootstrap',
+	'src/pretix/static/d3',
+	'src/pretix/static/jsi18n',
+	'src/pretix/static/fabric',
+	'src/pretix/static/datetimepicker',
+	'src/pretix/static/charts',
+	'src/pretix/static/fileupload',
+	'src/pretix/static/seating',
+	'src/pretix/static/rest_framework',
+	'src/pretix/static/select2',
+	'src/pretix/static/schema',
+	'src/pretix/static/slider',
+	'src/pretix/static/jquery',
+	'src/pretix/static/colorpicker',
+	'src/pretix/static/rrule',
+	'src/pretix/static/pretixcontrol/js/jquery.qrcode.min.js',
+	'src/pretix/static/pretixpresale/js/widget/docready.js',
+	// Pre-vue JS code
+	'src/pretix/static/pretixbase/js/addressform.js',
+	'src/pretix/static/pretixbase/js/asynctask.js',
+	'src/pretix/static/pretixbase/js/details.js',
+	'src/pretix/static/pretixbase/js/gettextstub.js',
+	'src/pretix/static/pretixbase/js/i18nstring.js',
+	'src/pretix/static/pretixcontrol/js/menu.js',
+	'src/pretix/static/pretixcontrol/js/ui/editor.js',
+	'src/pretix/static/pretixcontrol/js/ui/geo.js',
+	'src/pretix/static/pretixcontrol/js/ui/main.js',
+	'src/pretix/static/pretixcontrol/js/ui/plugins.js',
+	'src/pretix/static/pretixcontrol/js/ui/subevent.js',
+	'src/pretix/static/pretixcontrol/js/ui/variations.js',
+	'src/pretix/static/pretixcontrol/js/ui/webauthn.js',
+	'src/pretix/static/pretixpresale/js/ui/cart.js',
+	'src/pretix/static/pretixpresale/js/ui/main.js',
+	'src/pretix/static/pretixpresale/js/ui/questions.js',
+	'src/pretix/static/pretixpresale/js/widget/floatformat.js',
+	'src/pretix/static/pretixpresale/js/widget/widget.js',
+	'src/pretix/plugins/banktransfer/static',
+	'src/pretix/plugins/paypal2/static',
+	'src/pretix/plugins/statistics/static',
+	'src/pretix/plugins/stripe/static',
+	// Plugin checkouts
+	'local',
+	// docs
+	'doc',
 ])
 
 export default defineConfig([

package-lock.json

@@ -4148,9 +4148,9 @@
       }
     },
     "node_modules/smol-toml": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.6.1.tgz",
-      "integrity": "sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==",
+      "version": "1.7.1",
+      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.7.1.tgz",
+      "integrity": "sha512-PPlsspAZ4jbMBu5DMFhfUGDQLu/vrL4SyBROVS37x8ynnVmFIs1VPBz1Co8Xks3TvpIaZXmU85y4DrQ+UyVFoQ==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {

pyproject.toml

@@ -37,10 +37,10 @@ dependencies = [
   "css-inline==0.21.*",
   "defusedcsv>=3.0.0",
   "dnspython==2.*",
-  "Django[argon2]==5.2.*",
+  "Django[argon2]==5.2.*,>=5.2.17",
   "django-bootstrap3==26.2",
   "django-compressor==4.6.0",
-  "django-countries==9.0.*",
+  "django-countries==9.1.*",
   "django-filter==26.1",
   "django-formset-js-improved==0.5.0.5",
   "django-formtools==2.7",
@@ -56,7 +56,7 @@ dependencies = [
   "django-querytagger==0.0.3",
   "django-redis==7.0.*",
   "django-scopes==2.1.*",
-  "django-statici18n==2.7.*",
+  "django-statici18n==2.8.*",
   "djangorestframework==3.17.*",
   "dnspython==2.8.*",
   "drf_ujson2==1.7.*",
@@ -75,7 +75,7 @@ dependencies = [
   "packaging",
   "paypalrestsdk==1.13.*",
   "paypal-checkout-serversdk==1.0.*",
-  "PyJWT==2.13.*",
+  "PyJWT==2.14.*",
   "phonenumberslite==9.0.*",
   "Pillow==12.3.*",
   "pretix-plugin-build",
@@ -84,7 +84,7 @@ dependencies = [
   "pycountry",
   "pycparser==3.0",
   "pycryptodome==3.23.*",
-  "pypdf==6.5.*",
+  "pypdf==6.11.*",
   "python-bidi==0.6.*",  # Support for Arabic in reportlab
   "python-dateutil==2.9.*",
   "pytz",
@@ -94,7 +94,7 @@ dependencies = [
   "redis==7.4.*",
   "reportlab==5.0.*",
   "requests==2.34.*",
-  "sentry-sdk==2.68.*",
+  "sentry-sdk==2.69.*",
   "sepaxml==2.7.*",
   "stripe==7.9.*",
   "text-unidecode==1.*",

setup.cfg

@@ -26,6 +26,7 @@ ignore =
     src/tests/plugins/*
     src/tests/plugins/badges/*
     src/tests/plugins/banktransfer/*
+    src/tests/plugins/paypal/*
     src/tests/plugins/paypal2/*
     src/tests/plugins/pretixdroid/*
     src/tests/plugins/stripe/*

src/pretix/base/exporters/invoices.py

@@ -54,6 +54,7 @@ from ...control.forms.filter import get_all_payment_providers
 from ...helpers import GroupConcat
 from ...helpers.iter import chunked_iterable
 from ..exporter import BaseExporter, MultiSheetListExporter
+from ..invoicing.transmission import get_transmission_types
 from ..services.export import ExportError
 from ..services.invoices import invoice_pdf_task
 from ..signals import (
@@ -197,7 +198,7 @@ class InvoiceDataExporter(InvoiceExporterMixin, MultiSheetListExporter):
     def iterate_sheet(self, form_data, sheet):
         _ = gettext
         if sheet == 'invoices':
-            yield [
+            headers = [
                 _('Invoice number'),
                 _('Date'),
                 _('Order code'),
@@ -230,8 +231,18 @@ class InvoiceDataExporter(InvoiceExporterMixin, MultiSheetListExporter):
                 _('Total value (without taxes)'),
                 _('Payment matching IDs'),
                 _('Payment providers'),
+                _('Transmission type'),
+                _('Transmission status'),
+                _('Transmission date'),
             ]
 
+            transmission_types = get_transmission_types()
+            for tt in transmission_types:
+                for c in tt.describe_info_columns():
+                    headers.append(str(tt.verbose_name) + ': ' + str(c))
+
+            yield headers
+
             p_providers = OrderPayment.objects.filter(
                 order=OuterRef('order'),
                 state__in=(OrderPayment.PAYMENT_STATE_CONFIRMED, OrderPayment.PAYMENT_STATE_REFUNDED,
@@ -242,7 +253,7 @@ class InvoiceDataExporter(InvoiceExporterMixin, MultiSheetListExporter):
                 'm'
             ).order_by()
 
-            base_qs = self.invoices_queryset(form_data)\
+            base_qs = self.invoices_queryset(form_data)
 
             qs = base_qs.select_related(
                 'order', 'refers'
@@ -280,7 +291,7 @@ class InvoiceDataExporter(InvoiceExporterMixin, MultiSheetListExporter):
                                 if mid:
                                     pmis.append(mid)
                     pmi = '\n'.join(pmis)
-                    yield [
+                    line = [
                         i.full_invoice_no,
                         date_format(i.date, "SHORT_DATE_FORMAT"),
                         i.order.code,
@@ -315,8 +326,20 @@ class InvoiceDataExporter(InvoiceExporterMixin, MultiSheetListExporter):
                         ', '.join([
                             str(self.providers.get(p, p)) for p in sorted(set((i.payment_providers or '').split(',')))
                             if p and p != 'free'
-                        ])
+                        ]),
+                        i.transmission_type_instance.verbose_name,
+                        i.get_transmission_status_display(),
+                        date_format(i.transmission_date, "SHORT_DATETIME_FORMAT") if i.transmission_date else "",
                     ]
+                    for tt in transmission_types:
+                        if tt.identifier == i.transmission_type:
+                            described = dict(tt.describe_info(i.invoice_to_transmission_info, i.invoice_to_country, i.invoice_to_is_business))
+                            for c in tt.describe_info_columns():
+                                line.append(described.get(c, ""))
+                        else:
+                            for c in tt.describe_info_columns():
+                                line.append("")
+                    yield line
         elif sheet == 'lines':
             yield [
                 _('Invoice number'),

src/pretix/base/forms/questions.py

@@ -350,16 +350,22 @@ class WrappedPhonePrefixSelect(Select):
         return super().render(name, value or self.initial, *args, **kwargs)
 
     def get_context(self, name, value, attrs):
-        if value and self.choices[1][0] != value:
-            matching_choices = len([1 for p, c in self.choices if p == value])
+        # self.choices is lazy evaluated, needs to be realized to be modifiable
+        choices = list(self.choices)
+        if value and choices[1][0] != value:
+            matching_choices = len([1 for p, c in choices if p == value])
             if matching_choices > 1:
                 # Some countries share a phone prefix, for example +1 is used all over the Americas.
                 # This causes a UX problem: If the default value or the existing data is +12125552368,
                 # the widget will just show the first <option> entry with value="+1" as selected,
                 # which alphabetically is America Samoa, although most numbers statistically are from
-                # the US. As a workaround, we detect this case and add an aditional choice value with
+                # the US. As a workaround, we detect this case and add an additional choice value with
                 # just <option value="+1">+1</option> without an explicit country.
-                self.choices.insert(1, (value, value))
+                self.choices = [
+                    choices[0],
+                    (value, value),
+                    *choices[1:],
+                ]
         context = super().get_context(name, value, attrs)
         return context
 

src/pretix/base/invoicing/transmission.py

@@ -107,6 +107,9 @@ class TransmissionType:
     def transmission_info_to_form_data(self, transmission_info: dict) -> dict:
         return transmission_info
 
+    def describe_info_columns(self):
+        return [f.label for f in self.invoice_address_form_fields.values()]
+
     def describe_info(self, transmission_info: dict, country: Country, is_business: bool):
         form_data = self.transmission_info_to_form_data(transmission_info)
         data = []

src/pretix/base/models/devices.py

@@ -166,6 +166,7 @@ class Device(LoggedModel):
     )
     security_profile = models.CharField(
         max_length=190,
+        verbose_name=_('Security profile'),
         default='full',
         null=True,
         blank=False

src/pretix/base/pdf.py

@@ -801,6 +801,18 @@ def generate_compressed_addon_list(op, order, event, only_checked_in=False):
     return addonlist
 
 
+def get_sizebox(page: pypdf.PageObject):
+    mediabox = page.mediabox
+    cropbox = page.cropbox
+
+    return pypdf.generic.RectangleObject((
+        max(mediabox[0], cropbox[0]),
+        max(mediabox[1], cropbox[1]),
+        min(mediabox[2], cropbox[2]),
+        min(mediabox[3], cropbox[3]),
+    ))
+
+
 class Renderer:
 
     def __init__(self, event, layout, background_file):
@@ -1153,11 +1165,10 @@ class Renderer:
                 elif o['type'] == "poweredby":
                     self._draw_poweredby(canvas, op, o)
                 if self.bg_pdf:
-                    page_size = (
-                        self.bg_pdf.pages[0].mediabox[2] - self.bg_pdf.pages[0].mediabox[0],
-                        self.bg_pdf.pages[0].mediabox[3] - self.bg_pdf.pages[0].mediabox[1]
-                    )
-                    if self.bg_pdf.pages[0].get('/Rotate') in (90, 270):
+                    first_page = self.bg_pdf.pages[0]
+                    sizebox = get_sizebox(first_page)
+                    page_size = (sizebox.width, sizebox.height)
+                    if first_page.rotation in (90, 270):
                         # swap dimensions due to pdf being rotated
                         page_size = page_size[::-1]
                     canvas.setPageSize(page_size)
@@ -1232,9 +1243,7 @@ class Renderer:
 
             for i, page in enumerate(fg_pdf.pages):
                 bg_page = self.bg_pdf.pages[i]
-                _correct_page_media_box(bg_page)
-                page.merge_page(bg_page, over=False)
-                output.add_page(page)
+                _merge_with_correct_page_media_box(output, page, bg_page)
 
             # pdf_header is a string like "%pdf-X.X"
             if float(self.bg_pdf.pdf_header[5:]) > float(fg_pdf.pdf_header[5:]):
@@ -1299,39 +1308,36 @@ def merge_background(fg_pdf: PdfWriter, bg_pdf: PdfWriter, out_file, compress):
             bg_pdf.write(bg_filename)
             subprocess.run(pdftk_cmd, check=True, stdout=out_file)
     else:
+        output = PdfWriter()
         for i, page in enumerate(fg_pdf.pages):
             bg_page = bg_pdf.pages[i]
-            _correct_page_media_box(bg_page)
-            page.merge_page(bg_page, over=False)
+            _merge_with_correct_page_media_box(output, page, bg_page)
 
         # pdf_header is a string like "%pdf-X.X"
-        if float(bg_pdf.pdf_header[5:]) > float(fg_pdf.pdf_header[5:]):
-            fg_pdf.pdf_header = bg_pdf.pdf_header
-
-        fg_pdf.write(out_file)
+        output.pdf_header = (
+            bg_pdf.pdf_header
+            if float(bg_pdf.pdf_header[5:]) > float(fg_pdf.pdf_header[5:])
+            else fg_pdf.pdf_header
+        )
+        output.write(out_file)
 
 
-def _correct_page_media_box(page: pypdf.PageObject):
-    if page.rotation != 0:
-        page.transfer_rotation_to_content()
-    media_box = page.mediabox
+def _merge_with_correct_page_media_box(output: pypdf.PdfWriter, fg_page: pypdf.PageObject, bg_page: pypdf.PageObject):
+    """
+    Adds fg_page to output, merging bg_page behind it.
+
+    If bg_page has a non-zero mergebox/cropbox or is rotated via /Rotate, a transformation is applied to fix this."""
     trsf = pypdf.Transformation()
-    if media_box.bottom != 0:
-        trsf = trsf.translate(0, -media_box.bottom)
-    if media_box.left != 0:
-        trsf = trsf.translate(-media_box.left, 0)
-    page.add_transformation(trsf, False)
-    for b in ["/MediaBox", "/CropBox", "/BleedBox", "/TrimBox", "/ArtBox"]:
-        if b in page:
-            rr = pypdf.generic.RectangleObject(page[b])
-            pt1 = trsf.apply_on(rr.lower_left)
-            pt2 = trsf.apply_on(rr.upper_right)
-            page[pypdf.generic.NameObject(b)] = pypdf.generic.RectangleObject((
-                min(pt1[0], pt2[0]),
-                min(pt1[1], pt2[1]),
-                max(pt1[0], pt2[0]),
-                max(pt1[1], pt2[1]),
-            ))
+    if bg_page.rotation != 0:
+        trsf = trsf.rotate(-bg_page.rotation)
+
+    mb = get_sizebox(bg_page)
+    pt1 = trsf.apply_on(mb.lower_left)
+    pt2 = trsf.apply_on(mb.upper_right)
+    trsf = trsf.translate(-min(pt1[0], pt2[0]), -min(pt1[1], pt2[1]))
+
+    fg_page = output.add_page(fg_page)
+    fg_page.merge_transformed_page(bg_page, trsf, over=False, expand=False)
 
 
 @deconstructible

src/pretix/base/templatetags/money.py

@@ -20,6 +20,7 @@
 # <https://www.gnu.org/licenses/>.
 #
 from decimal import ROUND_HALF_UP, Decimal
+from typing import Optional
 
 from babel import Locale, UnknownLocaleError
 from babel.numbers import format_currency
@@ -35,32 +36,32 @@ register = template.Library()
 
 
 @register.filter("money")
-def money_filter(value: Decimal, arg='', hide_currency=False):
-    if isinstance(value, (float, int)):
+def money_filter(value: Optional[Decimal | float | int | str], arg='', hide_currency=False):
+    if isinstance(value, (float, int, str)):
+        if value == '':
+            return value
         value = Decimal(value)
     if value is None:
         value = Decimal('0.00')
     if not isinstance(value, Decimal):
-        if value == '':
-            return value
         raise TypeError("Invalid data type passed to money filter: %r" % type(value))
     if not arg:
         raise ValueError("No currency passed.")
     arg = arg.upper()
 
-    places = settings.CURRENCY_PLACES.get(arg, 2)
-    rounded = value.quantize(Decimal('1') / 10 ** places, ROUND_HALF_UP)
-    if places < 2 and rounded != value:
-        # We display decimal places even if we shouldn't for this currency if rounding
-        # would make the numbers incorrect. If this branch executes, it's likely a bug in
-        # pretix, but we won't show wrong numbers!
-        if hide_currency:
-            return floatformat(value, "2g")
-        else:
-            return '{} {}'.format(arg, floatformat(value, "2g"))
+    if value.normalize().as_tuple().exponent < -9:
+        # Heuristic: It's unlikely we'll ever see values of less than 0.000000001 in any currency. Therefore, if we
+        # do see them, we very likely deal with a floating point error. This happens mostly in dev mode when computations
+        # are made in SQLite, which uses REAL precision, but it can also happen when we naively pass a float from Python
+        # land to this filter (even though it should not happen).
+        value = value.quantize(Decimal('1e-9'), ROUND_HALF_UP).normalize()
+
+    currency_places = settings.CURRENCY_PLACES.get(arg, 2)
+    required_places = -value.normalize().as_tuple().exponent
+    render_places = max(currency_places, required_places)
 
     if hide_currency:
-        return floatformat(value, f"{places}g")
+        return floatformat(value, f"{render_places}g")
 
     try:
         locale = Locale(get_babel_locale())
@@ -68,14 +69,29 @@ def money_filter(value: Decimal, arg='', hide_currency=False):
         locale = "en"
 
     try:
-        return format_currency(value, arg, locale=locale)
+        return format_currency(
+            value,
+            arg,
+            locale=locale,
+            # We only allow Babel to restrict the digits to the digits defined by the currency if this does not remove any
+            # precision in case we have sub-currency precision (which we shouldn't have in most places, but it's still
+            # better than showing wrong data). Note: Weird precision effects can occur after in-database arithmetic
+            # on SQLite, since SQLite does not have fixed-decimal computation.
+            currency_digits=currency_places >= required_places,
+            decimal_quantization=currency_places >= required_places,
+        )
     except:
-        return '{} {}'.format(arg, floatformat(value, f"{places}g"))
+        return '{} {}'.format(arg, floatformat(value, f"{render_places}g"))
+
+
+@register.filter("money_without_currency")
+def money_filter_without_currency(value: Optional[Decimal | float | int | str], arg=''):
+    return money_filter(value, arg, hide_currency=True)
 
 
 @register.filter("money_numberfield")
-def money_numberfield_filter(value: Decimal, arg=''):
-    if isinstance(value, (float, int)):
+def money_numberfield_filter(value: Optional[Decimal | float | int | str], arg=''):
+    if isinstance(value, (float, int, str)):
         value = Decimal(value)
     if not isinstance(value, Decimal):
         raise TypeError("Invalid data type passed to money filter: %r" % type(value))
@@ -87,15 +103,28 @@ def money_numberfield_filter(value: Decimal, arg=''):
 
 
 @register.filter(is_safe=True)
-def tax_rate_format(number):
+def tax_rate_format(number: Optional[Decimal | float | int | str]):
     """
     Display a Decimal to its significant decimal places, used for tax rates.
     """
-    assert isinstance(number, Decimal)
+    if isinstance(number, (float, int, str)):
+        if number == '':
+            return number
+        number = Decimal(number)
+    if number is None:
+        number = Decimal('0.00')
+    if not isinstance(number, Decimal):
+        raise TypeError("Invalid data type passed to tax rate format filter: %r" % type(number))
+    if number.normalize().as_tuple().exponent < -9:
+        # Heuristic: It's unlikely we'll ever see values of less than 0.000000001 in any currency. Therefore, if we
+        # do see them, we very likely deal with a floating point error. This happens mostly in dev mode when computations
+        # are made in SQLite, which uses REAL precision, but it can also happen when we naively pass a float from Python
+        # land to this filter (even though it should not happen).
+        number = number.quantize(Decimal('1e-9'), ROUND_HALF_UP).normalize()
     return mark_safe(
         formats.number_format(
-            number.normalize(),
-            -number.as_tuple().exponent,
+            number,
+            -number.normalize().as_tuple().exponent,
             use_l10n=True,
             force_grouping=False,
         )

src/pretix/control/forms/__init__.py

@@ -172,7 +172,9 @@ class CachedFileInput(forms.ClearableFileInput):
         from ...base.models import CachedFile
         v = super().value_from_datadict(data, files, name)
         if v is None and data.get(name + '-cachedfile'):  # An explicit "[x] clear" would be False, not None
-            return CachedFile.objects.filter(id=data[name + '-cachedfile']).first()
+            v = CachedFile.objects.filter(id=data[name + '-cachedfile']).first()
+            if not v.allowed_for_session(self.request):
+                v = None
         return v
 
     def get_context(self, name, value, attrs):
@@ -244,6 +246,11 @@ class ExtFileField(ExtValidationMixin, SizeFileField):
 class CachedFileField(ExtFileField):
     widget = CachedFileInput
 
+    def __init__(self, *args, **kwargs):
+        self.request = kwargs.pop("request", None)
+        super().__init__(*args, **kwargs)
+        self.widget.request = self.request
+
     def to_python(self, data):
         from ...base.models import CachedFile
 
@@ -271,6 +278,8 @@ class CachedFileField(ExtFileField):
                 filename=data.name,
                 type=data.content_type,
             )
+            if self.request:
+                cf.bind_to_session(self.request)  # no salt because we want direct web access
             cf.file.save(data.name, data.file)
             cf.save()
             data._uploaded_to = cf
@@ -294,6 +303,8 @@ class CachedFileField(ExtFileField):
                 filename=data.name,
                 type=data.content_type,
             )
+            if self.request:
+                cf.bind_to_session(self.request)  # no salt because we want direct web access
             cf.file.save(data.name, data.file)
             cf.save()
             data._uploaded_to = cf

src/pretix/control/forms/global_settings.py

@@ -105,12 +105,12 @@ class GlobalSettingsForm(SettingsForm):
                     domain=settings.SITE_URL
                 )
             )),
-            ('widget_vite_origins', forms.CharField(
+            ('widget_vue2_origins', forms.CharField(
                 widget=forms.Textarea(attrs={'rows': '3'}),
                 required=False,
                 # Not translated on purpose, this is a temporary feature and contains too many special case words
-                label="Vite widget origins",
-                help_text="One origin per line (e.g. https://example.com). Requests from these origins will be served the new vite-based widget.",
+                label="Vue2 widget origins",
+                help_text="One origin per line (e.g. https://example.com). Requests from these origins will be served the old vue2-based widget.",
             ))
         ])
         responses = register_global_settings.send(self)

src/pretix/control/forms/rrule.py

@@ -87,6 +87,7 @@ class RRuleForm(forms.Form):
             ('1', pgettext_lazy('rrule', 'first')),
             ('2', pgettext_lazy('rrule', 'second')),
             ('3', pgettext_lazy('rrule', 'third')),
+            ('4', pgettext_lazy('rrule', 'fourth')),
             ('-1', pgettext_lazy('rrule', 'last')),
         ],
         required=False
@@ -134,6 +135,7 @@ class RRuleForm(forms.Form):
             ('1', pgettext_lazy('rrule', 'first')),
             ('2', pgettext_lazy('rrule', 'second')),
             ('3', pgettext_lazy('rrule', 'third')),
+            ('4', pgettext_lazy('rrule', 'fourth')),
             ('-1', pgettext_lazy('rrule', 'last')),
         ],
         required=False

src/pretix/control/views/auth.py

@@ -64,6 +64,7 @@ from pretix.base.forms.auth import (
 )
 from pretix.base.metrics import pretix_failed_logins, pretix_successful_logins
 from pretix.base.models import TeamInvite, U2FDevice, User, WebAuthnDevice
+from pretix.helpers import OF_SELF
 from pretix.helpers.http import get_client_ip, redirect_to_url
 from pretix.helpers.ratelimit import rate_limit, rate_limit_reset
 from pretix.helpers.security import handle_login_source, session_login
@@ -395,15 +396,17 @@ class Recover(TemplateView):
 
     def post(self, request, *args, **kwargs):
         if self.form.is_valid():
-            try:
-                user = User.objects.get(id=self.request.GET.get('id'), auth_backend='native')
-            except User.DoesNotExist:
-                return self.invalid('unknownuser')
-            if not default_token_generator.check_token(user, self.request.GET.get('token')):
-                return self.invalid('invalid')
-            user.set_password(self.form.cleaned_data['password'])
-            user.needs_password_change = False
-            user.save()
+            with transaction.atomic():
+                # Check token in transaction to prevent race condition
+                try:
+                    user = User.objects.select_for_update(of=OF_SELF).get(id=self.request.GET.get('id'), auth_backend='native')
+                except User.DoesNotExist:
+                    return self.invalid('unknownuser')
+                if not default_token_generator.check_token(user, self.request.GET.get('token')):
+                    return self.invalid('invalid')
+                user.set_password(self.form.cleaned_data['password'])
+                user.needs_password_change = False
+                user.save()
             messages.success(request, _('You can now login using your new password.'))
             user.log_action('pretix.control.auth.user.forgot_password.recovered')
 

src/pretix/control/views/discounts.py

@@ -163,6 +163,9 @@ class DiscountCreate(EventPermissionRequiredMixin, CreateView):
             i = modelcopy(self.copy_from)
             i.pk = None
             kwargs['instance'] = i
+            kwargs["initial"]["limit_sales_channels"] = self.copy_from.limit_sales_channels.all()
+            kwargs["initial"]["condition_limit_products"] = self.copy_from.condition_limit_products.all()
+            kwargs["initial"]["benefit_limit_products"] = self.copy_from.benefit_limit_products.all()
         else:
             kwargs['instance'] = Discount(event=self.request.event)
 

src/pretix/control/views/pdf.py

@@ -27,6 +27,7 @@ from decimal import Decimal
 from io import BytesIO
 
 from django.conf import settings
+from django.core.exceptions import PermissionDenied
 from django.core.files import File
 from django.core.files.base import ContentFile
 from django.core.files.storage import default_storage
@@ -193,6 +194,7 @@ class BaseEditorView(EventPermissionRequiredMixin, TemplateView):
             c.expires = now() + timedelta(days=7)
             c.date = now()
             c.filename = 'background_preview.pdf'
+            c.bind_to_session(request, "ticketoutput-pdf-background")
             c.type = 'application/pdf'
             c.save()
             c.file.save('empty.pdf', ContentFile(buffer.read()))
@@ -218,6 +220,7 @@ class BaseEditorView(EventPermissionRequiredMixin, TemplateView):
             c.expires = now() + timedelta(days=7)
             c.date = now()
             c.filename = 'background_preview.pdf'
+            c.bind_to_session(request, "ticketoutput-pdf-background")
             c.type = 'application/pdf'
             c.file = fileobj
             c.save()
@@ -303,5 +306,7 @@ class FontsCSSView(TemplateView):
 class PdfView(TemplateView):
     def get(self, request, *args, **kwargs):
         cf = get_object_or_404(CachedFile, id=kwargs.get("filename"), filename="background_preview.pdf")
+        if not cf.allowed_for_session(request, "ticketoutput-pdf-background"):
+            raise PermissionDenied()
         resp = FileResponse(cf.file, filename=cf.filename, content_type='application/pdf')
         return resp

src/pretix/control/views/vouchers.py

@@ -144,7 +144,7 @@ class VoucherList(VoucherQueryMixin, PaginationMixin, EventPermissionRequiredMix
         headers = [
             _('Voucher code'), _('Valid until'), _('Product'), _('Reserve quota'), _('Bypass quota'),
             _('Price effect'), _('Value'), _('Tag'), _('Redeemed'), _('Maximum usages'), _('Seat'),
-            _('Comment')
+            _('Comment'), _('Budget'), _('Budget used')
         ]
         writer.writerow(headers)
 
@@ -170,7 +170,9 @@ class VoucherList(VoucherQueryMixin, PaginationMixin, EventPermissionRequiredMix
                 str(v.redeemed),
                 str(v.max_usages),
                 str(v.seat) if v.seat else "",
-                str(v.comment) if v.comment else ""
+                str(v.comment) if v.comment else "",
+                str(v.budget) if v.budget is not None else "",
+                str(v.budget_used) if v.budget is not None else "",
             ]
             writer.writerow(row)
 

src/pretix/helpers/urls.py

@@ -29,7 +29,7 @@ from django.urls import reverse
 def build_absolute_uri(urlname, args=None, kwargs=None):
     warnings.warn(
         'Usage of build_absolute_uri is confusing since there are many functions with that name. '
-        'Replace this usage with ',
+        'Replace this usage with mainreverse_absolute.',
         DeprecationWarning
     )
     return mainreverse_absolute(urlname, args, kwargs)

src/pretix/locale/de/LC_MESSAGES/django.po

@@ -5,7 +5,7 @@ msgstr ""
 "Project-Id-Version: 1\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-08-24 15:35+0000\n"
-"PO-Revision-Date: 2026-08-25 00:00+0000\n"
+"PO-Revision-Date: 2026-09-14 23:00+0000\n"
 "Last-Translator: Raphael Michel <michel@rami.io>\n"
 "Language-Team: German <https://translate.pretix.eu/projects/pretix/pretix/"
 "de/>\n"
@@ -14,7 +14,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 2026.8.1\n"
+"X-Generator: Weblate 2026.9.1\n"
 "X-Poedit-Bookmarks: -1,-1,904,-1,-1,-1,-1,-1,-1,-1\n"
 
 #: pretix/_base_settings.py
@@ -11708,7 +11708,7 @@ msgid ""
 msgstr ""
 "Hallo,\n"
 "\n"
-"Sie erhalten diese Nachricht weil Sie einen neuen Link zu Ihrer Bestellung "
+"Sie erhalten diese Nachricht, weil Sie einen neuen Link zu Ihrer Bestellung "
 "für\n"
 "{event} angefordert haben.\n"
 "\n"
@@ -11738,8 +11738,8 @@ msgid ""
 msgstr ""
 "Hallo,\n"
 "\n"
-"Sie erhalten diese Nachricht weil Sie einen neuen Link zu Ihren Bestellungen "
-"für\n"
+"Sie erhalten diese Nachricht, weil Sie einen neuen Link zu Ihren "
+"Bestellungen für\n"
 "{event} angefordert haben. Sie finden Ihre Bestellungen unter folgenden "
 "Links:\n"
 "\n"

src/pretix/locale/eu/LC_MESSAGES/django.po

@@ -8,16 +8,16 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-08-24 15:35+0000\n"
-"PO-Revision-Date: 2026-08-24 14:30+0000\n"
+"PO-Revision-Date: 2026-09-04 14:29+0000\n"
 "Last-Translator: Albizuri <oier@puntu.eus>\n"
-"Language-Team: Basque <https://translate.pretix.eu/projects/pretix/pretix/eu/"
-">\n"
+"Language-Team: Basque <https://translate.pretix.eu/projects/pretix/pretix/"
+"eu/>\n"
 "Language: eu\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 2026.8.1\n"
+"X-Generator: Weblate 2026.9\n"
 
 #: pretix/_base_settings.py
 msgid "English"
@@ -891,7 +891,7 @@ msgstr "Produktuaren data"
 #: pretix/control/templates/pretixcontrol/order/index.html
 #: pretix/presale/templates/pretixpresale/event/order.html
 msgid "Order details"
-msgstr ""
+msgstr "Eskaeraren xehetasunak"
 
 #: pretix/base/datasync/sourcefields.py pretix/base/modelimport_orders.py
 #: pretix/control/forms/filter.py
@@ -17296,7 +17296,7 @@ msgstr ""
 
 #: pretix/control/logdisplay.py
 msgid "The order details have been changed."
-msgstr ""
+msgstr "Eskaeraren xehetasunak aldatu dira."
 
 #: pretix/control/logdisplay.py
 msgid "The order has been marked as unpaid."
@@ -23106,7 +23106,7 @@ msgstr ""
 #: pretix/control/templates/pretixcontrol/order/index.html
 #, python-format
 msgid "Order details: %(code)s"
-msgstr ""
+msgstr "Eskaeraren xehetasunak: %(code)s"
 
 #: pretix/control/templates/pretixcontrol/order/index.html
 #: pretix/control/templates/pretixcontrol/orders/index.html

src/pretix/locale/ja/LC_MESSAGES/django.po

@@ -8,8 +8,8 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-08-24 15:35+0000\n"
-"PO-Revision-Date: 2026-08-16 22:00+0000\n"
-"Last-Translator: Hijiri Umemoto <hijiri@umemoto.org>\n"
+"PO-Revision-Date: 2026-09-07 18:00+0000\n"
+"Last-Translator: Yasunobu YesNo Kawaguchi <kawaguti@gmail.com>\n"
 "Language-Team: Japanese <https://translate.pretix.eu/projects/pretix/pretix/"
 "ja/>\n"
 "Language: ja\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
-"X-Generator: Weblate 2026.8.1\n"
+"X-Generator: Weblate 2026.9\n"
 
 #: pretix/_base_settings.py
 msgid "English"
@@ -93,7 +93,7 @@ msgstr "ヘブライ語"
 
 #: pretix/_base_settings.py
 msgid "Hungarian"
-msgstr ""
+msgstr "ハンガリー語"
 
 #: pretix/_base_settings.py
 msgid "Indonesian"
@@ -220,7 +220,7 @@ msgstr "ターゲットURL"
 #: pretix/api/models.py pretix/base/models/devices.py
 #: pretix/base/models/organizer.py
 msgid "All events (including newly created ones)"
-msgstr "すべてのイベント（最近作成されたイベントを含む）"
+msgstr "すべてのイベント（今後作成されるものを含む）"
 
 #: pretix/api/models.py pretix/base/models/devices.py
 #: pretix/base/models/organizer.py
@@ -428,10 +428,8 @@ msgid "You cannot exchange a medium for a medium."
 msgstr "メディアを別のメディアに変更することはできません。"
 
 #: pretix/api/views/checkin.py
-#, fuzzy
-#| msgid "Product does not support medium exchange."
 msgid "You cannot simulate a medium exchange."
-msgstr "本製品は中程度の交換に対応していません。"
+msgstr "メディアの交換をシミュレートすることはできません。"
 
 #: pretix/api/views/oauth.py pretix/control/logdisplay.py
 #, python-brace-format
@@ -5691,7 +5689,7 @@ msgstr "国コード（ISO 3166-1 alpha-2）"
 
 #: pretix/base/models/items.py
 msgid "Asked on"
-msgstr ""
+msgstr "質問日"
 
 #: pretix/base/models/items.py pretix/base/models/organizer.py
 msgid ""
@@ -7340,12 +7338,9 @@ msgid "The payment for this invoice has already been received."
 msgstr "この請求書の支払いはすでに受領済みです。"
 
 #: pretix/base/payment.py
-#, fuzzy
-#| msgid ""
-#| "This payment is already being processed and can not be canceled any more."
 msgid ""
 "This payment is already being processed and cannot be canceled any more."
-msgstr "この支払いは処理中のため、キャンセルできません。"
+msgstr "この支払いはすでに処理中のため、キャンセルできません。"
 
 #: pretix/base/payment.py
 msgid "Automatic refunds are not supported by this payment provider."
@@ -8105,16 +8100,12 @@ msgid "Presale end"
 msgstr "前売り終了"
 
 #: pretix/base/reldate.py
-#, fuzzy
-#| msgid "Order email"
 msgid "Order creation"
-msgstr "注文者メール"
+msgstr "注文の作成"
 
 #: pretix/base/reldate.py
-#, fuzzy
-#| msgid "Order expired"
 msgid "Order expiry"
-msgstr "注文の有効期限が切れました"
+msgstr "注文の失効"
 
 #: pretix/base/reldate.py
 msgid "before"
@@ -8143,22 +8134,22 @@ msgstr "未設定"
 #: pretix/base/reldate.py
 #, python-brace-format
 msgid "A relative date cannot be expressed as \"before\" for \"{}\""
-msgstr ""
+msgstr "相対的な日付は、「{}」に対して「before」で表すことはできません"
 
 #: pretix/base/reldate.py
 #, python-brace-format
 msgid "A relative date cannot be expressed as \"after\" for \"{}\""
-msgstr ""
+msgstr "相対的な日付は「{}」に対して「after」として表すことはできません"
 
 #: pretix/base/reldate.py
 #, python-brace-format
 msgid "A relative time cannot be expressed as \"before\" for \"{}\""
-msgstr ""
+msgstr "相対時間は「{}」に対して「before」で表すことはできません"
 
 #: pretix/base/reldate.py
 #, python-brace-format
 msgid "A relative time cannot be expressed as \"after\" for \"{}\""
-msgstr ""
+msgstr "相対時間は「{}」に対して「after」で表すことはできません"
 
 #: pretix/base/secrets.py
 msgid "Random (default, works with all pretix apps)"
@@ -10067,12 +10058,12 @@ msgstr ""
 
 #: pretix/base/settings.py
 msgid "No dates match your criteria."
-msgstr ""
+msgstr "条件に合致する日付はありません。"
 
 #: pretix/base/settings.py
 msgctxt "subevents"
 msgid "Text for empty date results"
-msgstr ""
+msgstr "空の日付結果のテキスト"
 
 #: pretix/base/settings.py
 msgctxt "subevents"
@@ -10083,6 +10074,10 @@ msgid ""
 "touch with you to arrange further dates. We do not recommend more than one "
 "or two sentences."
 msgstr ""
+"このテキストは、カレンダーまたは日付リストが空の場合に表示されます。たとえば"
+"、月に日付が含まれていない場合や、ユーザーが選択したフィルターに結果が見つか"
+"らない場合です。これをご利用いただくことで、今後の日程調整のために連絡する方"
+"法を宣伝できます。1文または2文以上は推奨いたしません。"
 
 #: pretix/base/settings.py
 msgid "Guidance text"
@@ -13902,26 +13897,20 @@ msgid ""
 msgstr "ギフトカードの有効期限を発行年を含めた{}年に設定しました。"
 
 #: pretix/control/forms/event.py
-#, fuzzy
-#| msgid "Payment date"
 msgid "Payment term"
-msgstr "支払い日"
+msgstr "支払条件"
 
 #: pretix/control/forms/event.py
 msgid "same as above"
-msgstr ""
+msgstr "上記と同じ"
 
 #: pretix/control/forms/event.py
-#, fuzzy
-#| msgid "Payment term in days"
 msgid "different payment term in days"
-msgstr "支払い条件（日数）"
+msgstr "日数で表す異なる支払条件"
 
 #: pretix/control/forms/event.py
-#, fuzzy
-#| msgid "Payment term in minutes"
 msgid "different payment term in minutes"
-msgstr "支払い期限（分単位）"
+msgstr "分で表す異なる支払条件"
 
 #: pretix/control/forms/event.py
 msgid "Prices including tax"
@@ -22533,28 +22522,24 @@ msgstr ""
 "食事を提供する場合、ユーザーに食事制限について尋ねることができる一例です。"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
-#, fuzzy
-#| msgid "Create a new question"
 msgid "Create a new per-ticket question"
-msgstr "新しい質問を作成"
+msgstr "チケットごとに新しい質問を作成"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
-#, fuzzy
-#| msgid "Create a new question"
 msgid "Create a new order-level question"
-msgstr "新しい質問を作成"
+msgstr "注文ごとに新しい質問を作成"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
-#, fuzzy
-#| msgid "Delete question"
 msgid "Per-ticket questions"
-msgstr "質問を削除"
+msgstr "チケットごとの質問"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
 msgid ""
 "These questions are asked for every ticket, so possibly multiple times in "
 "the same order."
 msgstr ""
+"これらの質問はすべてのチケットに対して尋ねられるため、同じ順序で複数回になる"
+"可能性があります。"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
 msgid "Create a new question"
@@ -22573,28 +22558,24 @@ msgid "All personalized products"
 msgstr "すべてのパーソナライズされた製品"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
-#, fuzzy
-#| msgid "Include questions"
 msgid "Per-order questions"
-msgstr "質問を含む"
+msgstr "注文ごとの質問"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
 msgid ""
 "This functionality is in active development and expected to change "
 "significantly over the coming months."
-msgstr ""
+msgstr "この機能は現在開発が活発で、今後数か月で大幅に変化すると予想されています。"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
 msgid ""
 "Per-order questions are currently not supported and will not be displayed in "
 "pretixPOS."
-msgstr ""
+msgstr "注文ごとの質問は現在サポートされておらず、pretixPOSでは表示されません。"
 
 #: pretix/control/templates/pretixcontrol/items/questions.html
-#, fuzzy
-#| msgid "The question has been reordered."
 msgid "These questions are asked once per order."
-msgstr "質問の並び順が変更されました。"
+msgstr "これらの質問は、注文ごとに1回ずつ尋ねられます。"
 
 #: pretix/control/templates/pretixcontrol/items/quota.html
 #: pretix/control/templates/pretixcontrol/items/quota_edit.html
@@ -23186,10 +23167,8 @@ msgstr "(任意)"
 #: pretix/presale/templates/pretixpresale/event/checkout_confirm.html
 #: pretix/presale/templates/pretixpresale/event/checkout_questions.html
 #: pretix/presale/templates/pretixpresale/event/order_modify.html
-#, fuzzy
-#| msgid "Additional information"
 msgid "Additional order information"
-msgstr "追加情報"
+msgstr "追加の注文情報"
 
 #: pretix/control/templates/pretixcontrol/order/delete.html
 msgid "Delete order"
@@ -24856,14 +24835,13 @@ msgid "Hardware model"
 msgstr "ハードウェアの機種"
 
 #: pretix/control/templates/pretixcontrol/organizers/devices.html
-#, fuzzy, python-format
-#| msgid "Begin: %(time)s"
+#, python-format
 msgid "Last seen: %(time)s"
-msgstr "開始: %(time)s"
+msgstr "最後の閲覧: %(time)s"
 
 #: pretix/control/templates/pretixcontrol/organizers/devices.html
 msgid "No recent contact"
-msgstr ""
+msgstr "最近の連絡なし"
 
 #: pretix/control/templates/pretixcontrol/organizers/devices.html
 msgid "Not yet initialized"
@@ -28220,19 +28198,14 @@ msgstr ""
 "に高いことを意味します。ドメインのDNS設定を更新すべきです。"
 
 #: pretix/control/views/mailsetup.py
-#, fuzzy
-#| msgid ""
-#| "We did not find DMARC record for your domain. This means that there is a "
-#| "very high chance most of the emails will be rejected or marked as spam. "
-#| "You should update the DNS settings of your domain."
 msgid ""
 "We did not find a DMARC record for your domain. This means that there is a "
 "very high chance most of the emails will be rejected or marked as spam. You "
 "should update the DNS settings of your domain."
 msgstr ""
-"お客様のドメインのDMARCレコードが見つかりませんでした。これは、ほとんどのメー"
-"ルが拒否されたりスパムとしてマークされたりする可能性が非常に高いことを意味し"
-"ます。ドメインのDNS設定を更新すべきです。"
+"あなたのドメインのDMARCレコードが見つかりませんでした。これは、ほとんどの"
+"メールが拒否されたかスパムとしてマークされた可能性が非常に高いことを意味しま"
+"す。ドメインのDNS設定を更新すべきです。"
 
 #: pretix/control/views/mailsetup.py
 msgid "The verification code was incorrect, please try again."
@@ -30906,7 +30879,7 @@ msgstr ""
 
 #: pretix/plugins/paypal2/payment.py
 msgid "Allow further payments during compliance hold"
-msgstr ""
+msgstr "コンプライアンス保留の間、追加の支払いを許可する"
 
 #: pretix/plugins/paypal2/payment.py
 msgid ""
@@ -30916,16 +30889,20 @@ msgid ""
 "attempts during that window. This might result in them being charged twice "
 "if the original payment is approved."
 msgstr ""
+"PayPalの不正防止は、個々の支払いの処理をかなりの期間ブロックする可能性があり"
+"ます。この期間中、支払いは「保留中」とマークされています。顧客がその期間中に"
+"別の支払い試行を開始できるように許可することができます。元の支払いが承認され"
+"た場合、二重に請求される可能性があります。"
 
 #: pretix/plugins/paypal2/payment.py
 msgid "Timeout further payment attempts"
-msgstr ""
+msgstr "追加の支払い試行がタイムアウト"
 
 #: pretix/plugins/paypal2/payment.py
 msgid ""
 "Time duration in minutes after which another payment attempt is possible, "
 "while the last payment is still under investigation."
-msgstr ""
+msgstr "最後の支払いがまだ調査中である間、別の支払い試行が可能となる時間（分）。"
 
 #: pretix/plugins/paypal2/payment.py
 msgid "-- Automatic --"
@@ -31190,6 +31167,10 @@ msgid ""
 "twice in case PayPal allows your initial payment attempt. Please contact us "
 "to resolve this case."
 msgstr ""
+"支払いはPayPalで処理されています。通常より時間がかかります。PayPalが支払いを"
+"確認するまでお待ちいただくか、こちらまたは別の支払い方法で再度お支払いをお試"
+"しください。PayPalが最初の支払い試行を許可した場合、二重に請求される可能性が"
+"あります。この件を解決するために、弊社までご連絡ください。"
 
 #: pretix/plugins/paypal2/views.py
 msgid ""

src/pretix/locale/pt_BR/LC_MESSAGES/django.po

@@ -8,7 +8,7 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-08-24 15:35+0000\n"
-"PO-Revision-Date: 2026-03-30 21:00+0000\n"
+"PO-Revision-Date: 2026-09-02 08:35+0000\n"
 "Last-Translator: Renne Rocha <renne@rocha.dev.br>\n"
 "Language-Team: Portuguese (Brazil) <https://translate.pretix.eu/projects/"
 "pretix/pretix/pt_BR/>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
-"X-Generator: Weblate 5.16.2\n"
+"X-Generator: Weblate 2026.8.1\n"
 
 #: pretix/_base_settings.py
 msgid "English"
@@ -93,7 +93,7 @@ msgstr "Hebraico"
 
 #: pretix/_base_settings.py
 msgid "Hungarian"
-msgstr ""
+msgstr "Húngaro"
 
 #: pretix/_base_settings.py
 msgid "Indonesian"
@@ -153,7 +153,7 @@ msgstr "Espanhol (América latina)"
 
 #: pretix/_base_settings.py
 msgid "Thai"
-msgstr ""
+msgstr "Tailandês"
 
 #: pretix/_base_settings.py
 msgid "Turkish"
@@ -3022,11 +3022,12 @@ msgid ""
 "The field \"%(label)s\" may not contain special characters such as "
 "\"%(chars)s\"."
 msgstr ""
+"O campo \"%(label)s\" não pode conter caracteres especiais como %(chars)s\"."
 
 #: pretix/base/forms/questions.py
 #, python-format
 msgid "The field \"%(label)s\" may not contain an URL (%(url)s)."
-msgstr ""
+msgstr "O campo \"%(label)s\" não pode conter uma URL (%(url)s)."
 
 #: pretix/base/forms/questions.py
 msgctxt "phonenumber"
@@ -8173,7 +8174,7 @@ msgstr "Permitida"
 #: pretix/base/permissions.py
 msgctxt "permission_level"
 msgid "Access existing events"
-msgstr ""
+msgstr "Acessar eventos existentes"
 
 #: pretix/base/permissions.py
 msgctxt "permission_level"
@@ -13607,11 +13608,15 @@ msgstr "Por favor, continue em uma nova aba"
 #: pretix/base/templates/pretixbase/framebreak.html
 msgid "For security reasons, the following step is only possible in a new tab."
 msgstr ""
+"Por razões de segurança, o passo seguinte só é possível de ser feito em uma "
+"nova aba."
 
 #: pretix/base/templates/pretixbase/framebreak.html
 msgid ""
 "If the new tab did not open automatically, please click the following button:"
 msgstr ""
+"Se uma nova aba não abrir automaticamente, por favor, clique no botão a "
+"seguir:"
 
 #: pretix/base/templates/pretixbase/framebreak.html
 #: pretix/presale/templates/pretixpresale/event/cookies.html

src/pretix/locale/sv/LC_MESSAGES/django.po

@@ -8,8 +8,8 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-08-24 15:35+0000\n"
-"PO-Revision-Date: 2026-08-09 06:00+0000\n"
-"Last-Translator: Julien <julien@circusiloveyou.com>\n"
+"PO-Revision-Date: 2026-09-04 14:29+0000\n"
+"Last-Translator: Linnea Thelander <linnea@coeo.events>\n"
 "Language-Team: Swedish <https://translate.pretix.eu/projects/pretix/pretix/"
 "sv/>\n"
 "Language: sv\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 2026.8.1\n"
+"X-Generator: Weblate 2026.9\n"
 
 #: pretix/_base_settings.py
 msgid "English"
@@ -19170,8 +19170,9 @@ msgstr ""
 #: pretix/presale/templates/pretixpresale/event/order_pay.html
 #: pretix/presale/templates/pretixpresale/event/order_pay_change.html
 #: pretix/presale/templates/pretixpresale/event/position_change.html
+#, fuzzy
 msgid "Continue"
-msgstr "Fortsätta"
+msgstr "Fortsätt"
 
 #: pretix/control/templates/pretixcontrol/auth/oauth_authorization.html
 msgid "Authorize an application"

src/pretix/locale/sv/LC_MESSAGES/djangojs.po

@@ -8,8 +8,8 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-06 15:52+0000\n"
-"PO-Revision-Date: 2026-08-09 06:00+0000\n"
-"Last-Translator: Julien <julien@circusiloveyou.com>\n"
+"PO-Revision-Date: 2026-09-04 14:29+0000\n"
+"Last-Translator: Linnea Thelander <linnea@coeo.events>\n"
 "Language-Team: Swedish <https://translate.pretix.eu/projects/pretix/pretix-"
 "js/sv/>\n"
 "Language: sv\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 2026.8.1\n"
+"X-Generator: Weblate 2026.9\n"
 
 #: pretix/plugins/banktransfer/static/pretixplugins/banktransfer/ui.js
 msgid "Marked as paid"
@@ -133,8 +133,9 @@ msgstr "Mercado Pago"
 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 #: pretix/static/pretixpresale/js/ui/cart.js
+#, fuzzy
 msgid "Continue"
-msgstr "Fortsätta"
+msgstr "Fortsätt"
 
 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 #: pretix/plugins/stripe/static/pretixplugins/stripe/pretix-stripe.js

src/pretix/plugins/badges/exporters.py

@@ -55,7 +55,6 @@ from django.db.models.functions import Cast, Coalesce
 from django.utils.timezone import make_aware
 from django.utils.translation import gettext as _, gettext_lazy, pgettext_lazy
 from pypdf import PageObject, PdfReader, PdfWriter, Transformation
-from pypdf.generic import RectangleObject
 from reportlab.lib import pagesizes
 from reportlab.lib.units import inch, mm
 from reportlab.pdfgen import canvas
@@ -238,15 +237,8 @@ def _render_nup_page(nup_pdf: PdfWriter, input_pages: PageObject, opt: dict) ->
         di = i % badges_per_page
         tx = opt['margins'][3] + (di % opt['cols']) * opt['offsets'][0]
         ty = opt['margins'][2] + (opt['rows'] - 1 - (di // opt['cols'])) * opt['offsets'][1]
-        page.add_transformation(Transformation().translate(tx, ty))
-        page.mediabox = RectangleObject((
-            Decimal('%.5f' % (page.mediabox.left.as_numeric() + tx)),
-            Decimal('%.5f' % (page.mediabox.bottom.as_numeric() + ty)),
-            Decimal('%.5f' % (page.mediabox.right.as_numeric() + tx)),
-            Decimal('%.5f' % (page.mediabox.top.as_numeric() + ty))
-        ))
         page.trimbox = page.cropbox = page.mediabox
-        nup_page.merge_page(page)
+        nup_page.merge_transformed_page(page, Transformation().translate(tx, ty))
     return nup_page
 
 

src/pretix/plugins/banktransfer/static/pretixplugins/banktransfer/ui.js

@@ -1,183 +1,183 @@
-/*global $, gettext*/
+/* global gettext */
 var bankimport_transactionlist = {
 
-    _btn_click: function (e) {
-        console.log(e.delegateTarget);
-        var trans_id = parseInt($(e.delegateTarget).attr("name").split("_")[1]);
-        var value = $(e.delegateTarget).val();
-        if (value === "discard") {
-            bankimport_transactionlist.discard(trans_id);
-        } else if (value === "accept") {
-            bankimport_transactionlist.accept(trans_id);
-        } else if (value === "retry") {
-            bankimport_transactionlist.retry(trans_id);
-        } else if (value === "assign") {
-            bankimport_transactionlist.assign(trans_id);
-        }
-        return false;
-    },
+	_btn_click: function (e) {
+		console.log(e.delegateTarget)
+		let trans_id = parseInt($(e.delegateTarget).attr('name').split('_')[1])
+		let value = $(e.delegateTarget).val()
+		if (value === 'discard') {
+			bankimport_transactionlist.discard(trans_id)
+		} else if (value === 'accept') {
+			bankimport_transactionlist.accept(trans_id)
+		} else if (value === 'retry') {
+			bankimport_transactionlist.retry(trans_id)
+		} else if (value === 'assign') {
+			bankimport_transactionlist.assign(trans_id)
+		}
+		return false
+	},
 
-    _action: function (id, action, success) {
-        $("tr[data-id=" + id + "] button").prop("disabled", true);
-        var data = {
-            "csrfmiddlewaretoken": $("[name=csrfmiddlewaretoken]").val()
-        };
-        data["action_" + id] = action;
-        $.ajax({
-            "method": "POST",
-            "url": $(".transaction-list").attr("data-url"),
-            "data": data,
-            "dataType": "json",
-            "success": function (data) {
-                if (data.status == "ok") {
-                    $("tr[data-id=" + id + "]").removeClass("has-error");
-                    if (data.comment) {
-                        bankimport_transactionlist.comment_reset_to_text(id, data.comment, data.plain);
-                    }
-                    success();
-                } else {
-                    $("tr[data-id=" + id + "] button").prop("disabled", false);
-                    $("tr[data-id=" + id + "] .help-block").remove();
-                    $("tr[data-id=" + id + "]").addClass("has-error");
-                    $("<p>").addClass("help-block").text(data.message).appendTo($("tr[data-id=" + id + "] td.actions"));
-                }
-            }
-        });
-    },
+	_action: function (id, action, success) {
+		$('tr[data-id=' + id + '] button').prop('disabled', true)
+		let data = {
+			csrfmiddlewaretoken: $('[name=csrfmiddlewaretoken]').val()
+		}
+		data['action_' + id] = action
+		$.ajax({
+			method: 'POST',
+			url: $('.transaction-list').attr('data-url'),
+			data: data,
+			dataType: 'json',
+			success: function (data) {
+				if (data.status == 'ok') {
+					$('tr[data-id=' + id + ']').removeClass('has-error')
+					if (data.comment) {
+						bankimport_transactionlist.comment_reset_to_text(id, data.comment, data.plain)
+					}
+					success()
+				} else {
+					$('tr[data-id=' + id + '] button').prop('disabled', false)
+					$('tr[data-id=' + id + '] .help-block').remove()
+					$('tr[data-id=' + id + ']').addClass('has-error')
+					$('<p>').addClass('help-block').text(data.message).appendTo($('tr[data-id=' + id + '] td.actions'))
+				}
+			}
+		})
+	},
 
-    discard: function (id) {
-        bankimport_transactionlist._action(id, "discard", function () {
-            $("tr[data-id=" + id + "] td").remove();
-        });
-    },
+	discard: function (id) {
+		bankimport_transactionlist._action(id, 'discard', function () {
+			$('tr[data-id=' + id + '] td').remove()
+		})
+	},
 
-    retry: function (id) {
-        bankimport_transactionlist._action(id, "retry", function () {
-            $("tr[data-id=" + id + "] td.actions").html('').text(gettext("Marked as paid"));
-        });
-    },
+	retry: function (id) {
+		bankimport_transactionlist._action(id, 'retry', function () {
+			$('tr[data-id=' + id + '] td.actions').html('').text(gettext('Marked as paid'))
+		})
+	},
 
-    accept: function (id) {
-        bankimport_transactionlist._action(id, "accept", function () {
-            $("tr[data-id=" + id + "] td.actions").html('').text(gettext("Marked as paid"));
-        });
-    },
+	accept: function (id) {
+		bankimport_transactionlist._action(id, 'accept', function () {
+			$('tr[data-id=' + id + '] td.actions').html('').text(gettext('Marked as paid'))
+		})
+	},
 
-    assign: function (id) {
-        bankimport_transactionlist._action(id, "assign:" + $("tr[data-id=" + id + "] input.form-control:not(.tt-hint)").val(), function () {
-            $("tr[data-id=" + id + "] td.actions").html('').text(gettext("Marked as paid"));
-        });
-    },
+	assign: function (id) {
+		bankimport_transactionlist._action(id, 'assign:' + $('tr[data-id=' + id + '] input.form-control:not(.tt-hint)').val(), function () {
+			$('tr[data-id=' + id + '] td.actions').html('').text(gettext('Marked as paid'))
+		})
+	},
 
-    comment_reset_to_text: function (id, text, plain) {
-        var $box = $("tr[data-id=" + id + "] .comment-box");
-        $box[0].dataset["plain"] = plain;
-        $box.html("")
-            .append($("<strong>").text(gettext("Comment:")))
-            .append(" ")
-            .append($("<span>").addClass("comment").append(" ").append(text))
-            .append(" ")
-            .append($("<a>").addClass("comment-modify btn btn-default btn-xs")
-                        .append("<span class='fa fa-edit'></span>"));
-    },
+	comment_reset_to_text: function (id, text, plain) {
+		let $box = $('tr[data-id=' + id + '] .comment-box')
+		$box[0].dataset['plain'] = plain
+		$box.html('')
+			.append($('<strong>').text(gettext('Comment:')))
+			.append(' ')
+			.append($('<span>').addClass('comment').append(' ').append(text))
+			.append(' ')
+			.append($('<a>').addClass('comment-modify btn btn-default btn-xs')
+				.append('<span class=\'fa fa-edit\'></span>'))
+	},
 
-    comment_start_edit: function (e) {
-        var $box = $(e.target).closest("div");
-        var id = $box.closest("tr").attr("data-id");
-        var $inp = $("<textarea>").addClass("form-control");
-        var orig_rendered = $box.find(".comment");
-        var orig_text = $box[0].dataset.plain;
-        $inp.val(orig_text);
+	comment_start_edit: function (e) {
+		let $box = $(e.target).closest('div')
+		let id = $box.closest('tr').attr('data-id')
+		let $inp = $('<textarea>').addClass('form-control')
+		let orig_rendered = $box.find('.comment')
+		let orig_text = $box[0].dataset.plain
+		$inp.val(orig_text)
 
-        var $btngrp = $("<div>");
-        $btngrp.addClass("btn-group");
-        var $btn1 = $("<button>");
-        $btn1.attr("type", "button").addClass("btn btn-default");
-        $btn1.append("<span class='fa fa-check'></span>");
-        $btngrp.append($btn1);
-        var $btn2 = $("<button>");
-        $btn2.attr("type", "button").addClass("btn btn-default");
-        $btn2.append("<span class='fa fa-close'></span>");
-        $btngrp.append($btn2);
-        $box.html("").append($inp).append($btngrp);
-        $btn1.click(function () {
-            var text = $box.find("textarea").val();
-            $box.find("input, textarea, button").prop("disabled", true);
-            bankimport_transactionlist._action(id, "comment:" + text, function () {
-                $("tr[data-id=" + id + "] button").prop("disabled", false);
-            });
-        });
-        $btn2.click(function () {
-            bankimport_transactionlist.comment_reset_to_text(id, orig_rendered, orig_text);
-        });
+		let $btngrp = $('<div>')
+		$btngrp.addClass('btn-group')
+		let $btn1 = $('<button>')
+		$btn1.attr('type', 'button').addClass('btn btn-default')
+		$btn1.append('<span class=\'fa fa-check\'></span>')
+		$btngrp.append($btn1)
+		let $btn2 = $('<button>')
+		$btn2.attr('type', 'button').addClass('btn btn-default')
+		$btn2.append('<span class=\'fa fa-close\'></span>')
+		$btngrp.append($btn2)
+		$box.html('').append($inp).append($btngrp)
+		$btn1.click(function () {
+			let text = $box.find('textarea').val()
+			$box.find('input, textarea, button').prop('disabled', true)
+			bankimport_transactionlist._action(id, 'comment:' + text, function () {
+				$('tr[data-id=' + id + '] button').prop('disabled', false)
+			})
+		})
+		$btn2.click(function () {
+			bankimport_transactionlist.comment_reset_to_text(id, orig_rendered, orig_text)
+		})
 
-        e.preventDefault();
-    },
+		e.preventDefault()
+	},
 
-    typeahead_source: function () {
-        return new Bloodhound({
-            datumTokenizer: Bloodhound.tokenizers.obj.whitespace('value'),
-            queryTokenizer: Bloodhound.tokenizers.whitespace,
-            remote: {
-                url: $(".transaction-list").attr("data-url"),
-                prepare: function (query, settings) {
-                    settings.url = settings.url + '?query=' + encodeURIComponent(query);
-                    return settings;
-                },
-                transform: function (object) {
-                    var results = object.results;
-                    var suggs = [];
-                    var reslen = results.length;
-                    for (var i = 0; i < reslen; i++) {
-                        suggs.push(results[i]);
-                    }
-                    return suggs;
-                }
-            }
-        });
-    },
+	typeahead_source: function () {
+		return new Bloodhound({
+			datumTokenizer: Bloodhound.tokenizers.obj.whitespace('value'),
+			queryTokenizer: Bloodhound.tokenizers.whitespace,
+			remote: {
+				url: $('.transaction-list').attr('data-url'),
+				prepare: function (query, settings) {
+					settings.url = settings.url + '?query=' + encodeURIComponent(query)
+					return settings
+				},
+				transform: function (object) {
+					let results = object.results
+					let suggs = []
+					let reslen = results.length
+					for (let i = 0; i < reslen; i++) {
+						suggs.push(results[i])
+					}
+					return suggs
+				}
+			}
+		})
+	},
 
-    init: function () {
-        if ($(".transaction-list").length) {
-            $(".transaction-list button").click(bankimport_transactionlist._btn_click);
+	init: function () {
+		if ($('.transaction-list').length) {
+			$('.transaction-list button').click(bankimport_transactionlist._btn_click)
 
-            $(".transaction-list").on("click", ".comment-modify", bankimport_transactionlist.comment_start_edit);
+			$('.transaction-list').on('click', '.comment-modify', bankimport_transactionlist.comment_start_edit)
 
-            $(".transaction-list .form-control").typeahead(null, {
-                minLength: 2,
-                name: 'order-dataset',
-                source: bankimport_transactionlist.typeahead_source(),
-                display: function (obj) {
-                    return obj.code;
-                },
-                templates: {
-                    suggestion: function (obj) {
-                        return '<div>' + obj.code + ' (' + obj.total + ', ' + obj.status + ')</div>';
-                    }
-                }
-            }).keypress(function (e) {
-                if (e.keyCode === 13) {
-                    $(this).parent().parent().find("button[value=assign]").click();
-                }
-            });
-        }
+			$('.transaction-list .form-control').typeahead(null, {
+				minLength: 2,
+				name: 'order-dataset',
+				source: bankimport_transactionlist.typeahead_source(),
+				display: function (obj) {
+					return obj.code
+				},
+				templates: {
+					suggestion: function (obj) {
+						return '<div>' + obj.code + ' (' + obj.total + ', ' + obj.status + ')</div>'
+					}
+				}
+			}).keypress(function (e) {
+				if (e.keyCode === 13) {
+					$(this).parent().parent().find('button[value=assign]').click()
+				}
+			})
+		}
 
-        if ($("[data-job-waiting]").length) {
-            window.setTimeout(bankimport_transactionlist.check_state, 750);
-        }
-    },
+		if ($('[data-job-waiting]').length) {
+			window.setTimeout(bankimport_transactionlist.check_state, 750)
+		}
+	},
 
-    check_state: function () {
-        $.getJSON($("[data-job-waiting-url]").attr("data-job-waiting-url"), function (data) {
-            if (data.state == 'running' || data.state == 'pending') {
-                window.setTimeout(bankimport_transactionlist.check_state, 750);
-            } else {
-                location.reload();
-            }
-        });
-    }
-};
+	check_state: function () {
+		$.getJSON($('[data-job-waiting-url]').attr('data-job-waiting-url'), function (data) {
+			if (data.state == 'running' || data.state == 'pending') {
+				window.setTimeout(bankimport_transactionlist.check_state, 750)
+			} else {
+				location.reload()
+			}
+		})
+	}
+}
 
 $(function () {
-    bankimport_transactionlist.init();
-});
+	bankimport_transactionlist.init()
+})

src/pretix/plugins/paypal/__init__.py

@@ -19,3 +19,15 @@
 # You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
 # <https://www.gnu.org/licenses/>.
 #
+
+# This file is based on an earlier version of pretix which was released under the Apache License 2.0. The full text of
+# the Apache License 2.0 can be obtained at <http://www.apache.org/licenses/LICENSE-2.0>.
+#
+# This file may have since been changed and any changes are released under the terms of AGPLv3 as described above. A
+# full history of changes and contributors is available at <https://github.com/pretix/pretix>.
+#
+# This file contains Apache-licensed contributions copyrighted by: Tobias Kunze
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the Apache License 2.0 is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under the License.

src/pretix/plugins/paypal/api.py

@@ -0,0 +1,53 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+import hashlib
+import json
+
+from django.core.cache import cache
+from paypalrestsdk.api import Api as VendorApi
+
+
+class Api(VendorApi):
+    def get_token_hash(self, authorization_code=None, refresh_token=None, headers=None):
+        if not authorization_code and not refresh_token:
+            checksum = hashlib.sha256(self.basic_auth().encode()).hexdigest()
+            cache_key_hash = f'pretix_paypal_token_hash_{checksum}'
+            cache_key_request_at = f'pretix_paypal_token_request_at_{checksum}'
+            token_hash = cache.get(cache_key_hash)
+            if token_hash:
+                token_request_at = cache.get(cache_key_request_at)
+                if token_request_at:
+                    self.token_hash = json.loads(token_hash)
+                    self.token_request_at = token_request_at
+                    self.validate_token_hash()
+                    if self.token_hash is not None:
+                        return self.token_hash
+
+            t = super().get_token_hash(authorization_code, refresh_token, headers)
+
+            if self.token_hash:
+                cache.set(cache_key_hash, json.dumps(self.token_hash), 3600 * 4)
+                cache.set(cache_key_request_at, self.token_request_at, 3600 * 4)
+
+            return t
+
+        return super().get_token_hash(authorization_code, refresh_token, headers)

src/pretix/plugins/paypal/apps.py

@@ -0,0 +1,69 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+
+# This file is based on an earlier version of pretix which was released under the Apache License 2.0. The full text of
+# the Apache License 2.0 can be obtained at <http://www.apache.org/licenses/LICENSE-2.0>.
+#
+# This file may have since been changed and any changes are released under the terms of AGPLv3 as described above. A
+# full history of changes and contributors is available at <https://github.com/pretix/pretix>.
+#
+# This file contains Apache-licensed contributions copyrighted by: Tobias Kunze
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the Apache License 2.0 is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under the License.
+
+from django.apps import AppConfig
+from django.utils.functional import cached_property
+from django.utils.translation import gettext_lazy as _
+
+from pretix import __version__ as version
+
+
+class PaypalApp(AppConfig):
+    name = 'pretix.plugins.paypal'
+    verbose_name = _("PayPal")
+
+    class PretixPluginMeta:
+        name = _("PayPal")
+        author = _("the pretix team")
+        version = version
+        category = 'PAYMENT'
+        featured = True
+        picture = 'pretixplugins/paypal/paypal_logo.svg'
+        description = _("Accept payments with your PayPal account. PayPal is one of the most popular payment methods "
+                        "world-wide.")
+
+    def ready(self):
+        from . import signals  # NOQA
+
+    def is_available(self, event):
+        return 'pretix.plugins.paypal' in event.plugins.split(',')
+
+    @cached_property
+    def compatibility_errors(self):
+        errs = []
+        try:
+            import paypalrestsdk  # NOQA
+        except ImportError:
+            errs.append("Python package 'paypalrestsdk' is not installed.")
+        return errs

src/pretix/plugins/paypal/migrations/0005_delete_referencedpaypalobject.py

@@ -1,21 +0,0 @@
-# Generated by Django 5.2.17 on 2026-09-08 08:05
-
-from django.db import migrations
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ("paypal", "0004_bigint"),
-    ]
-
-    operations = [
-        migrations.SeparateDatabaseAndState(
-            state_operations=[
-                migrations.DeleteModel(
-                    name="ReferencedPayPalObject",
-                ),
-            ],
-            database_operations=[]
-        )
-    ]

src/pretix/plugins/paypal/models.py

@@ -26,6 +26,3 @@ class ReferencedPayPalObject(models.Model):
     reference = models.CharField(max_length=190, db_index=True, unique=True)
     order = models.ForeignKey('pretixbase.Order', on_delete=models.CASCADE)
     payment = models.ForeignKey('pretixbase.OrderPayment', null=True, blank=True, on_delete=models.CASCADE)
-
-    class Meta:
-        db_table = 'paypal_referencedpaypalobject'

src/pretix/plugins/paypal/payment.py

@@ -0,0 +1,715 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+
+# This file is based on an earlier version of pretix which was released under the Apache License 2.0. The full text of
+# the Apache License 2.0 can be obtained at <http://www.apache.org/licenses/LICENSE-2.0>.
+#
+# This file may have since been changed and any changes are released under the terms of AGPLv3 as described above. A
+# full history of changes and contributors is available at <https://github.com/pretix/pretix>.
+#
+# This file contains Apache-licensed contributions copyrighted by: Jakob Schnell, Tobias Kunze
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the Apache License 2.0 is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under the License.
+
+import json
+import logging
+from collections import OrderedDict
+from decimal import Decimal
+
+import paypalrestsdk
+import paypalrestsdk.exceptions
+from django import forms
+from django.contrib import messages
+from django.http import HttpRequest
+from django.template.loader import get_template
+from django.urls import reverse
+from django.utils.html import format_html
+from django.utils.timezone import now
+from django.utils.translation import gettext as __, gettext_lazy as _
+from i18nfield.strings import LazyI18nString
+from paypalrestsdk.exceptions import BadRequest, UnauthorizedAccess
+from paypalrestsdk.openid_connect import Tokeninfo
+from requests import RequestException
+
+from pretix.base.decimal import round_decimal
+from pretix.base.forms import SecretKeySettingsField
+from pretix.base.models import Event, Order, OrderPayment, OrderRefund, Quota
+from pretix.base.payment import BasePaymentProvider, PaymentException
+from pretix.base.settings import SettingsSandbox
+from pretix.base.views.redirect import safelink
+from pretix.multidomain.urlreverse import eventreverse_absolute
+from pretix.plugins.paypal.api import Api
+from pretix.plugins.paypal.models import ReferencedPayPalObject
+
+logger = logging.getLogger('pretix.plugins.paypal')
+
+SUPPORTED_CURRENCIES = ['AUD', 'BRL', 'CAD', 'CZK', 'DKK', 'EUR', 'HKD', 'HUF', 'INR', 'ILS', 'JPY', 'MYR', 'MXN',
+                        'TWD', 'NZD', 'NOK', 'PHP', 'PLN', 'GBP', 'RUB', 'SGD', 'SEK', 'CHF', 'THB', 'USD']
+
+LOCAL_ONLY_CURRENCIES = ['INR']
+
+
+class Paypal(BasePaymentProvider):
+    identifier = 'paypal'
+    verbose_name = _('PayPal')
+    payment_form_fields = OrderedDict([
+    ])
+
+    def __init__(self, event: Event):
+        super().__init__(event)
+        self.settings = SettingsSandbox('payment', 'paypal', event)
+
+    @property
+    def test_mode_message(self):
+        if self.settings.connect_client_id and not self.settings.secret:
+            # in OAuth mode, sandbox mode needs to be set global
+            is_sandbox = self.settings.connect_endpoint == 'sandbox'
+        else:
+            is_sandbox = self.settings.get('endpoint') == 'sandbox'
+        if is_sandbox:
+            return _('The PayPal sandbox is being used, you can test without actually sending money but you will need a '
+                     'PayPal sandbox user to log in.')
+        return None
+
+    @property
+    def settings_form_fields(self):
+        if self.settings.connect_client_id and not self.settings.secret:
+            # PayPal connect
+            if self.settings.connect_user_id:
+                fields = [
+                    ('connect_user_id',
+                     forms.CharField(
+                         label=_('PayPal account'),
+                         disabled=True
+                     )),
+                ]
+            else:
+                return {}
+        else:
+            fields = [
+                ('client_id',
+                 forms.CharField(
+                     label=_('Client ID'),
+                     min_length=80,
+                     help_text=format_html(
+                         '<a target="_blank" rel="noopener" href="{docs_url}">{text}</a>',
+                         text=_('Click here for a tutorial on how to obtain the required keys'),
+                         docs_url='https://docs.pretix.eu/en/latest/user/payments/paypal.html',
+                     )
+                 )),
+                ('secret',
+                 SecretKeySettingsField(
+                     label=_('Secret'),
+                     max_length=80,
+                     min_length=80,
+                 )),
+                ('endpoint',
+                 forms.ChoiceField(
+                     label=_('Endpoint'),
+                     initial='live',
+                     choices=(
+                         ('live', 'Live'),
+                         ('sandbox', 'Sandbox'),
+                     ),
+                 )),
+            ]
+
+        extra_fields = [
+            ('prefix',
+             forms.CharField(
+                 label=_('Reference prefix'),
+                 help_text=_('Any value entered here will be added in front of the regular booking reference '
+                             'containing the order number.'),
+                 required=False,
+             )),
+            ('postfix',
+             forms.CharField(
+                 label=_('Reference postfix'),
+                 help_text=_('Any value entered here will be added behind the regular booking reference '
+                             'containing the order number.'),
+                 required=False,
+             )),
+        ]
+
+        d = OrderedDict(
+            fields + extra_fields + list(super().settings_form_fields.items())
+        )
+
+        d.move_to_end('prefix')
+        d.move_to_end('postfix')
+        d.move_to_end('_enabled', False)
+        return d
+
+    def get_connect_url(self, request):
+        request.session['payment_paypal_oauth_event'] = request.event.pk
+
+        self.init_api()
+        return Tokeninfo.authorize_url({'scope': 'openid profile email'})
+
+    def settings_content_render(self, request):
+        settings_content = ""
+        if self.settings.connect_client_id and not self.settings.secret:
+            # Use PayPal connect
+            if not self.settings.connect_user_id:
+                # Migrate User to PayPal v2
+                self.event.disable_plugin("pretix.plugins.paypal")
+                self.event.enable_plugin("pretix.plugins.paypal2")
+                self.event.save()
+            else:
+                settings_content = (
+                    "<button formaction='{}' class='btn btn-danger'>{}</button>"
+                ).format(
+                    reverse('plugins:paypal:oauth.disconnect', kwargs={
+                        'organizer': self.event.organizer.slug,
+                        'event': self.event.slug,
+                    }),
+                    _('Disconnect from PayPal')
+                )
+        else:
+            # Migrate User to PayPal v2
+            self.event.disable_plugin("pretix.plugins.paypal")
+            self.event.enable_plugin("pretix.plugins.paypal2")
+            self.event.save()
+
+        return settings_content
+
+    def is_allowed(self, request: HttpRequest, total: Decimal = None) -> bool:
+        return super().is_allowed(request, total) and self.event.currency in SUPPORTED_CURRENCIES
+
+    def init_api(self):
+        if self.settings.connect_client_id and not self.settings.secret:
+            paypalrestsdk.api.__api__ = Api(
+                mode="sandbox" if "sandbox" in self.settings.connect_endpoint else 'live',
+                client_id=self.settings.connect_client_id,
+                client_secret=self.settings.connect_secret_key,
+                openid_client_id=self.settings.connect_client_id,
+                openid_client_secret=self.settings.connect_secret_key
+            )
+        else:
+            paypalrestsdk.api.__api__ = Api(
+                mode="sandbox" if "sandbox" in self.settings.get('endpoint') else 'live',
+                client_id=self.settings.get('client_id'),
+                client_secret=self.settings.get('secret')
+            )
+
+    def payment_is_valid_session(self, request):
+        return (request.session.get('payment_paypal_id', '') != ''
+                and request.session.get('payment_paypal_payer', '') != '')
+
+    def payment_form_render(self, request) -> str:
+        template = get_template('pretixplugins/paypal/checkout_payment_form.html')
+        ctx = {'request': request, 'event': self.event, 'settings': self.settings}
+        return template.render(ctx)
+
+    def checkout_prepare(self, request, cart):
+        self.init_api()
+        kwargs = {}
+        if request.resolver_match and 'cart_namespace' in request.resolver_match.kwargs:
+            kwargs['cart_namespace'] = request.resolver_match.kwargs['cart_namespace']
+
+        try:
+            if self.settings.connect_client_id and not self.settings.secret:
+                if not request.event.settings.payment_paypal_connect_user_id:
+                    raise PaymentException('Payment method misconfigured')
+
+                try:
+                    tokeninfo = Tokeninfo.create_with_refresh_token(request.event.settings.payment_paypal_connect_refresh_token)
+                except BadRequest as ex:
+                    ex = json.loads(ex.content)
+                    messages.error(request, '{}: {} ({})'.format(
+                        _('We had trouble communicating with PayPal'),
+                        ex['error_description'],
+                        ex['correlation_id'])
+                    )
+                    return
+
+                # Even if the token has been refreshed, calling userinfo() can fail. In this case we just don't
+                # get the userinfo again and use the payment_paypal_connect_user_id that we already have on file
+                try:
+                    userinfo = tokeninfo.userinfo()
+                    request.event.settings.payment_paypal_connect_user_id = userinfo.email
+                except UnauthorizedAccess:
+                    pass
+
+                payee = {
+                    "email": request.event.settings.payment_paypal_connect_user_id,
+                    # If PayPal ever offers a good way to get the MerchantID via the Identifity API,
+                    # we should use it instead of the merchant's eMail-address
+                    # "merchant_id": request.event.settings.payment_paypal_connect_user_id,
+                }
+            else:
+                payee = {}
+
+            payment = paypalrestsdk.Payment({
+                'header': {'PayPal-Partner-Attribution-Id': 'ramiioSoftwareentwicklung_SP'},
+                'intent': 'sale',
+                'payer': {
+                    "payment_method": "paypal",
+                },
+                "redirect_urls": {
+                    "return_url": eventreverse_absolute(request.event, 'plugins:paypal:return', kwargs=kwargs),
+                    "cancel_url": eventreverse_absolute(request.event, 'plugins:paypal:abort', kwargs=kwargs),
+                },
+                "transactions": [
+                    {
+                        "item_list": {
+                            "items": [
+                                {
+                                    "name": '{prefix}{orderstring}{postfix}'.format(
+                                        prefix='{} '.format(self.settings.prefix) if self.settings.prefix else '',
+                                        orderstring=__('Order for %s') % str(request.event),
+                                        postfix=' {}'.format(self.settings.postfix) if self.settings.postfix else ''
+                                    ),
+                                    "quantity": 1,
+                                    "price": self.format_price(cart['total']),
+                                    "currency": request.event.currency
+                                }
+                            ]
+                        },
+                        "amount": {
+                            "currency": request.event.currency,
+                            "total": self.format_price(cart['total'])
+                        },
+                        "description": __('Event tickets for {event}').format(event=request.event.name),
+                        "payee": payee,
+                        "custom": '{prefix}{slug}{postfix}'.format(
+                            prefix='{} '.format(self.settings.prefix) if self.settings.prefix else '',
+                            slug=request.event.slug.upper(),
+                            postfix=' {}'.format(self.settings.postfix) if self.settings.postfix else ''
+                        )
+                    }
+                ]
+            })
+            request.session['payment_paypal_payment'] = None
+            return self._create_payment(request, payment)
+        except paypalrestsdk.exceptions.ConnectionError as e:
+            messages.error(request, _('We had trouble communicating with PayPal'))
+            logger.exception('Error on creating payment: ' + str(e))
+
+    def format_price(self, value):
+        return str(round_decimal(value, self.event.currency, {
+            # PayPal behaves differently than Stripe in deciding what currencies have decimal places
+            # Source https://developer.paypal.com/docs/classic/api/currency_codes/
+            'HUF': 0,
+            'JPY': 0,
+            'MYR': 0,
+            'TWD': 0,
+            # However, CLPs are not listed there while PayPal requires us not to send decimal places there. WTF.
+            'CLP': 0,
+            # Let's just guess that the ones listed here are 0-based as well
+            # https://developers.braintreepayments.com/reference/general/currencies
+            'BIF': 0,
+            'DJF': 0,
+            'GNF': 0,
+            'KMF': 0,
+            'KRW': 0,
+            'LAK': 0,
+            'PYG': 0,
+            'RWF': 0,
+            'UGX': 0,
+            'VND': 0,
+            'VUV': 0,
+            'XAF': 0,
+            'XOF': 0,
+            'XPF': 0,
+        }))
+
+    @property
+    def abort_pending_allowed(self):
+        return False
+
+    def _create_payment(self, request, payment):
+        if payment.create():
+            if payment.state not in ('created', 'approved', 'pending'):
+                messages.error(request, _('We had trouble communicating with PayPal'))
+                logger.error('Invalid payment state: ' + str(payment))
+                return
+            request.session['payment_paypal_id'] = payment.id
+            for link in payment.links:
+                if link.method == "REDIRECT" and link.rel == "approval_url":
+                    if request.session.get('iframe_session', False):
+                        return safelink(link.href, framebreak=True)
+                    else:
+                        return str(link.href)
+        else:
+            messages.error(request, _('We had trouble communicating with PayPal'))
+            logger.error('Error on creating payment: ' + str(payment.error))
+
+    def checkout_confirm_render(self, request) -> str:
+        """
+        Returns the HTML that should be displayed when the user selected this provider
+        on the 'confirm order' page.
+        """
+        template = get_template('pretixplugins/paypal/checkout_payment_confirm.html')
+        ctx = {'request': request, 'event': self.event, 'settings': self.settings}
+        return template.render(ctx)
+
+    def execute_payment(self, request: HttpRequest, payment: OrderPayment):
+        if (request.session.get('payment_paypal_id', '') == '' or request.session.get('payment_paypal_payer', '') == ''):
+            raise PaymentException(_('We were unable to process your payment. See below for details on how to '
+                                     'proceed.'))
+
+        self.init_api()
+        pp_payment = paypalrestsdk.Payment.find(request.session.get('payment_paypal_id'))
+        ReferencedPayPalObject.objects.get_or_create(order=payment.order, payment=payment, reference=pp_payment.id)
+        if str(pp_payment.transactions[0].amount.total) != str(payment.amount) or pp_payment.transactions[0].amount.currency \
+                != self.event.currency:
+            logger.error('Value mismatch: Payment %s vs paypal trans %s' % (payment.id, str(pp_payment)))
+            raise PaymentException(_('We were unable to process your payment. See below for details on how to '
+                                     'proceed.'))
+
+        return self._execute_payment(pp_payment, request, payment)
+
+    def _execute_payment(self, payment, request, payment_obj):
+        if payment.state == 'created':
+            payment.replace([
+                {
+                    "op": "replace",
+                    "path": "/transactions/0/item_list",
+                    "value": {
+                        "items": [
+                            {
+                                "name": '{prefix}{orderstring}{postfix}'.format(
+                                    prefix='{} '.format(self.settings.prefix) if self.settings.prefix else '',
+                                    orderstring=__('Order {slug}-{code}').format(
+                                        slug=self.event.slug.upper(),
+                                        code=payment_obj.order.code
+                                    ),
+                                    postfix=' {}'.format(self.settings.postfix) if self.settings.postfix else ''
+                                ),
+                                "quantity": 1,
+                                "price": self.format_price(payment_obj.amount),
+                                "currency": payment_obj.order.event.currency
+                            }
+                        ]
+                    }
+                },
+                {
+                    "op": "replace",
+                    "path": "/transactions/0/description",
+                    "value": '{prefix}{orderstring}{postfix}'.format(
+                        prefix='{} '.format(self.settings.prefix) if self.settings.prefix else '',
+                        orderstring=__('Order {order} for {event}').format(
+                            event=request.event.name,
+                            order=payment_obj.order.code
+                        ),
+                        postfix=' {}'.format(self.settings.postfix) if self.settings.postfix else ''
+                    ),
+                }
+            ])
+            try:
+                payment.execute({"payer_id": request.session.get('payment_paypal_payer')})
+            except paypalrestsdk.exceptions.ConnectionError as e:
+                messages.error(request, _('We had trouble communicating with PayPal'))
+                logger.exception('Error on creating payment: ' + str(e))
+            except RequestException as e:
+                messages.error(request, _('We had trouble communicating with PayPal'))
+                logger.exception('Error on creating payment: ' + str(e))
+
+        for trans in payment.transactions:
+            for rr in trans.related_resources:
+                if hasattr(rr, 'sale') and rr.sale:
+                    if rr.sale.state == 'pending':
+                        messages.warning(request, _('PayPal has not yet approved the payment. We will inform you as '
+                                                    'soon as the payment completed.'))
+                        payment_obj.info = json.dumps(payment.to_dict())
+                        payment_obj.state = OrderPayment.PAYMENT_STATE_PENDING
+                        payment_obj.save()
+                        return
+
+        payment_obj.refresh_from_db()
+        if payment.state == 'pending':
+            messages.warning(request, _('PayPal has not yet approved the payment. We will inform you as soon as the '
+                                        'payment completed.'))
+            payment_obj.info = json.dumps(payment.to_dict())
+            payment_obj.state = OrderPayment.PAYMENT_STATE_PENDING
+            payment_obj.save()
+            return
+
+        if payment.state != 'approved':
+            payment_obj.fail(info=payment.to_dict())
+            logger.error('Invalid state: %s' % str(payment))
+            raise PaymentException(_('We were unable to process your payment. See below for details on how to '
+                                     'proceed.'))
+
+        if payment_obj.state == OrderPayment.PAYMENT_STATE_CONFIRMED:
+            logger.warning('PayPal success event even though order is already marked as paid')
+            return
+
+        try:
+            payment_obj.info = json.dumps(payment.to_dict())
+            payment_obj.save(update_fields=['info'])
+            payment_obj.confirm()
+        except Quota.QuotaExceededException as e:
+            raise PaymentException(str(e))
+        return None
+
+    def payment_pending_render(self, request, payment) -> str:
+        retry = True
+        try:
+            if (
+                    payment.info
+                    and payment.info_data['transactions'][0]['related_resources'][0]['sale']['state'] == 'pending'
+            ):
+                retry = False
+        except (KeyError, IndexError):
+            pass
+        template = get_template('pretixplugins/paypal/pending.html')
+        ctx = {'request': request, 'event': self.event, 'settings': self.settings,
+               'retry': retry, 'order': payment.order}
+        return template.render(ctx)
+
+    def matching_id(self, payment: OrderPayment):
+        sale_id = None
+        for trans in payment.info_data.get('transactions', []):
+            for res in trans.get('related_resources', []):
+                if 'sale' in res and 'id' in res['sale']:
+                    sale_id = res['sale']['id']
+        return sale_id or payment.info_data.get('id', None)
+
+    def api_payment_details(self, payment: OrderPayment):
+        sale_id = None
+        for trans in payment.info_data.get('transactions', []):
+            for res in trans.get('related_resources', []):
+                if 'sale' in res and 'id' in res['sale']:
+                    sale_id = res['sale']['id']
+        return {
+            "payer_email": payment.info_data.get('payer', {}).get('payer_info', {}).get('email'),
+            "payer_id": payment.info_data.get('payer', {}).get('payer_info', {}).get('payer_id'),
+            "cart_id": payment.info_data.get('cart', None),
+            "payment_id": payment.info_data.get('id', None),
+            "sale_id": sale_id,
+        }
+
+    def payment_control_render(self, request: HttpRequest, payment: OrderPayment):
+        template = get_template('pretixplugins/paypal/control.html')
+        sale_id = None
+        for trans in payment.info_data.get('transactions', []):
+            for res in trans.get('related_resources', []):
+                if 'sale' in res and 'id' in res['sale']:
+                    sale_id = res['sale']['id']
+        ctx = {'request': request, 'event': self.event, 'settings': self.settings,
+               'payment_info': payment.info_data, 'order': payment.order, 'sale_id': sale_id}
+        return template.render(ctx)
+
+    def payment_control_render_short(self, payment: OrderPayment) -> str:
+        return payment.info_data.get('payer', {}).get('payer_info', {}).get('email', '')
+
+    def payment_partial_refund_supported(self, payment: OrderPayment):
+        # Paypal refunds are possible for 180 days after purchase:
+        # https://www.paypal.com/lc/smarthelp/article/how-do-i-issue-a-refund-faq780#:~:text=Refund%20after%20180%20days%20of,PayPal%20balance%20of%20the%20recipient.
+        return (now() - payment.payment_date).days <= 180
+
+    def payment_refund_supported(self, payment: OrderPayment):
+        self.payment_partial_refund_supported(payment)
+
+    def execute_refund(self, refund: OrderRefund):
+        self.init_api()
+
+        try:
+            sale = None
+            for res in refund.payment.info_data['transactions'][0]['related_resources']:
+                for k, v in res.items():
+                    if k == 'sale':
+                        sale = paypalrestsdk.Sale.find(v['id'])
+                        break
+
+            if not sale:
+                pp_payment = paypalrestsdk.Payment.find(refund.payment.info_data['id'])
+                for res in pp_payment.transactions[0].related_resources:
+                    for k, v in res.to_dict().items():
+                        if k == 'sale':
+                            sale = paypalrestsdk.Sale.find(v['id'])
+                            break
+
+            pp_refund = sale.refund({
+                "amount": {
+                    "total": self.format_price(refund.amount),
+                    "currency": refund.order.event.currency
+                }
+            })
+        except paypalrestsdk.exceptions.ConnectionError as e:
+            refund.order.log_action('pretix.event.order.refund.failed', {
+                'local_id': refund.local_id,
+                'provider': refund.provider,
+                'error': str(e)
+            })
+            raise PaymentException(_('Refunding the amount via PayPal failed: {}').format(str(e)))
+        if not pp_refund.success():
+            refund.order.log_action('pretix.event.order.refund.failed', {
+                'local_id': refund.local_id,
+                'provider': refund.provider,
+                'error': str(pp_refund.error)
+            })
+            raise PaymentException(_('Refunding the amount via PayPal failed: {}').format(pp_refund.error))
+        else:
+            sale = paypalrestsdk.Payment.find(refund.payment.info_data['id'])
+            refund.payment.info = json.dumps(sale.to_dict())
+            refund.info = json.dumps(pp_refund.to_dict())
+            refund.done()
+
+    def payment_prepare(self, request, payment_obj):
+        self.init_api()
+
+        try:
+            if request.event.settings.payment_paypal_connect_user_id:
+                try:
+                    tokeninfo = Tokeninfo.create_with_refresh_token(request.event.settings.payment_paypal_connect_refresh_token)
+                except BadRequest as ex:
+                    ex = json.loads(ex.content)
+                    messages.error(request, '{}: {} ({})'.format(
+                        _('We had trouble communicating with PayPal'),
+                        ex['error_description'],
+                        ex['correlation_id'])
+                    )
+                    return
+
+                # Even if the token has been refreshed, calling userinfo() can fail. In this case we just don't
+                # get the userinfo again and use the payment_paypal_connect_user_id that we already have on file
+                try:
+                    userinfo = tokeninfo.userinfo()
+                    request.event.settings.payment_paypal_connect_user_id = userinfo.email
+                except UnauthorizedAccess:
+                    pass
+
+                payee = {
+                    "email": request.event.settings.payment_paypal_connect_user_id,
+                    # If PayPal ever offers a good way to get the MerchantID via the Identifity API,
+                    # we should use it instead of the merchant's eMail-address
+                    # "merchant_id": request.event.settings.payment_paypal_connect_user_id,
+                }
+            else:
+                payee = {}
+
+            payment = paypalrestsdk.Payment({
+                'header': {'PayPal-Partner-Attribution-Id': 'ramiioSoftwareentwicklung_SP'},
+                'intent': 'sale',
+                'payer': {
+                    "payment_method": "paypal",
+                },
+                "redirect_urls": {
+                    "return_url": eventreverse_absolute(request.event, 'plugins:paypal:return'),
+                    "cancel_url": eventreverse_absolute(request.event, 'plugins:paypal:abort'),
+                },
+                "transactions": [
+                    {
+                        "item_list": {
+                            "items": [
+                                {
+                                    "name": '{prefix}{orderstring}{postfix}'.format(
+                                        prefix='{} '.format(self.settings.prefix) if self.settings.prefix else '',
+                                        orderstring=__('Order {slug}-{code}').format(
+                                            slug=self.event.slug.upper(),
+                                            code=payment_obj.order.code
+                                        ),
+                                        postfix=' {}'.format(self.settings.postfix) if self.settings.postfix else ''
+                                    ),
+                                    "quantity": 1,
+                                    "price": self.format_price(payment_obj.amount),
+                                    "currency": payment_obj.order.event.currency
+                                }
+                            ]
+                        },
+                        "amount": {
+                            "currency": request.event.currency,
+                            "total": self.format_price(payment_obj.amount)
+                        },
+                        "description": '{prefix}{orderstring}{postfix}'.format(
+                            prefix='{} '.format(self.settings.prefix) if self.settings.prefix else '',
+                            orderstring=__('Order {order} for {event}').format(
+                                event=request.event.name,
+                                order=payment_obj.order.code
+                            ),
+                            postfix=' {}'.format(self.settings.postfix) if self.settings.postfix else ''
+                        ),
+                        "payee": payee,
+                        "custom": '{prefix}{slug}-{code}{postfix}'.format(
+                            prefix='{} '.format(self.settings.prefix) if self.settings.prefix else '',
+                            slug=self.event.slug.upper(),
+                            code=payment_obj.order.code,
+                            postfix=' {}'.format(self.settings.postfix) if self.settings.postfix else ''
+                        ),
+                    }
+                ]
+            })
+            request.session['payment_paypal_payment'] = payment_obj.pk
+            return self._create_payment(request, payment)
+        except paypalrestsdk.exceptions.ConnectionError as e:
+            messages.error(request, _('We had trouble communicating with PayPal'))
+            logger.exception('Error on creating payment: ' + str(e))
+
+    def shred_payment_info(self, obj):
+        if obj.info:
+            d = json.loads(obj.info)
+            new = {
+                'id': d.get('id'),
+                'payer': {
+                    'payer_info': {
+                        'email': '█'
+                    }
+                },
+                'update_time': d.get('update_time'),
+                'transactions': [
+                    {
+                        'amount': t.get('amount')
+                    } for t in d.get('transactions', [])
+                ],
+                '_shredded': True
+            }
+            obj.info = json.dumps(new)
+            obj.save(update_fields=['info'])
+
+        for le in obj.order.all_logentries().filter(action_type="pretix.plugins.paypal.event").exclude(data=""):
+            d = le.parsed_data
+            if 'resource' in d:
+                d['resource'] = {
+                    'id': d['resource'].get('id'),
+                    'sale_id': d['resource'].get('sale_id'),
+                    'parent_payment': d['resource'].get('parent_payment'),
+                }
+            le.data = json.dumps(d)
+            le.shredded = True
+            le.save(update_fields=['data', 'shredded'])
+
+    def render_invoice_text(self, order: Order, payment: OrderPayment) -> str:
+        if order.status == Order.STATUS_PAID:
+            if payment.info_data.get('id', None):
+                try:
+                    return '{}\r\n{}: {}\r\n{}: {}'.format(
+                        _('The payment for this invoice has already been received.'),
+                        _('PayPal payment ID'),
+                        payment.info_data['id'],
+                        _('PayPal sale ID'),
+                        payment.info_data['transactions'][0]['related_resources'][0]['sale']['id']
+                    )
+                except (KeyError, IndexError):
+                    return '{}\r\n{}: {}'.format(
+                        _('The payment for this invoice has already been received.'),
+                        _('PayPal payment ID'),
+                        payment.info_data['id']
+                    )
+            else:
+                return super().render_invoice_text(order, payment)
+
+        return self.settings.get('_invoice_text', as_type=LazyI18nString, default='')

src/pretix/plugins/paypal/signals.py

@@ -0,0 +1,31 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+
+from django.dispatch import receiver
+
+from pretix.base.signals import register_payment_providers
+
+
+@receiver(register_payment_providers, dispatch_uid="payment_paypal")
+def register_payment_provider(sender, **kwargs):
+    from .payment import Paypal
+    return Paypal

src/pretix/plugins/paypal/static/pretixplugins/paypal/paypal_logo.svg

@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Generator: Adobe Illustrator 16.0.4, SVG Export Plug-In . SVG Version: 6.00 Build 0)  -->
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="124px" height="33px" viewBox="0 0 124 33" enable-background="new 0 0 124 33" xml:space="preserve">
+<path fill="#253B80" d="M46.211,6.749h-6.839c-0.468,0-0.866,0.34-0.939,0.802l-2.766,17.537c-0.055,0.346,0.213,0.658,0.564,0.658  h3.265c0.468,0,0.866-0.34,0.939-0.803l0.746-4.73c0.072-0.463,0.471-0.803,0.938-0.803h2.165c4.505,0,7.105-2.18,7.784-6.5  c0.306-1.89,0.013-3.375-0.872-4.415C50.224,7.353,48.5,6.749,46.211,6.749z M47,13.154c-0.374,2.454-2.249,2.454-4.062,2.454  h-1.032l0.724-4.583c0.043-0.277,0.283-0.481,0.563-0.481h0.473c1.235,0,2.4,0,3.002,0.704C47.027,11.668,47.137,12.292,47,13.154z"/>
+<path fill="#253B80" d="M66.654,13.075h-3.275c-0.279,0-0.52,0.204-0.563,0.481l-0.145,0.916l-0.229-0.332  c-0.709-1.029-2.29-1.373-3.868-1.373c-3.619,0-6.71,2.741-7.312,6.586c-0.313,1.918,0.132,3.752,1.22,5.031  c0.998,1.176,2.426,1.666,4.125,1.666c2.916,0,4.533-1.875,4.533-1.875l-0.146,0.91c-0.055,0.348,0.213,0.66,0.562,0.66h2.95  c0.469,0,0.865-0.34,0.939-0.803l1.77-11.209C67.271,13.388,67.004,13.075,66.654,13.075z M62.089,19.449  c-0.316,1.871-1.801,3.127-3.695,3.127c-0.951,0-1.711-0.305-2.199-0.883c-0.484-0.574-0.668-1.391-0.514-2.301  c0.295-1.855,1.805-3.152,3.67-3.152c0.93,0,1.686,0.309,2.184,0.892C62.034,17.721,62.232,18.543,62.089,19.449z"/>
+<path fill="#253B80" d="M84.096,13.075h-3.291c-0.314,0-0.609,0.156-0.787,0.417l-4.539,6.686l-1.924-6.425  c-0.121-0.402-0.492-0.678-0.912-0.678h-3.234c-0.393,0-0.666,0.384-0.541,0.754l3.625,10.638l-3.408,4.811  c-0.268,0.379,0.002,0.9,0.465,0.9h3.287c0.312,0,0.604-0.152,0.781-0.408L84.564,13.97C84.826,13.592,84.557,13.075,84.096,13.075z  "/>
+<path fill="#179BD7" d="M94.992,6.749h-6.84c-0.467,0-0.865,0.34-0.938,0.802l-2.766,17.537c-0.055,0.346,0.213,0.658,0.562,0.658  h3.51c0.326,0,0.605-0.238,0.656-0.562l0.785-4.971c0.072-0.463,0.471-0.803,0.938-0.803h2.164c4.506,0,7.105-2.18,7.785-6.5  c0.307-1.89,0.012-3.375-0.873-4.415C99.004,7.353,97.281,6.749,94.992,6.749z M95.781,13.154c-0.373,2.454-2.248,2.454-4.062,2.454  h-1.031l0.725-4.583c0.043-0.277,0.281-0.481,0.562-0.481h0.473c1.234,0,2.4,0,3.002,0.704  C95.809,11.668,95.918,12.292,95.781,13.154z"/>
+<path fill="#179BD7" d="M115.434,13.075h-3.273c-0.281,0-0.52,0.204-0.562,0.481l-0.145,0.916l-0.23-0.332  c-0.709-1.029-2.289-1.373-3.867-1.373c-3.619,0-6.709,2.741-7.311,6.586c-0.312,1.918,0.131,3.752,1.219,5.031  c1,1.176,2.426,1.666,4.125,1.666c2.916,0,4.533-1.875,4.533-1.875l-0.146,0.91c-0.055,0.348,0.213,0.66,0.564,0.66h2.949  c0.467,0,0.865-0.34,0.938-0.803l1.771-11.209C116.053,13.388,115.785,13.075,115.434,13.075z M110.869,19.449  c-0.314,1.871-1.801,3.127-3.695,3.127c-0.949,0-1.711-0.305-2.199-0.883c-0.484-0.574-0.666-1.391-0.514-2.301  c0.297-1.855,1.805-3.152,3.67-3.152c0.93,0,1.686,0.309,2.184,0.892C110.816,17.721,111.014,18.543,110.869,19.449z"/>
+<path fill="#179BD7" d="M119.295,7.23l-2.807,17.858c-0.055,0.346,0.213,0.658,0.562,0.658h2.822c0.469,0,0.867-0.34,0.939-0.803  l2.768-17.536c0.055-0.346-0.213-0.659-0.562-0.659h-3.16C119.578,6.749,119.338,6.953,119.295,7.23z"/>
+<path fill="#253B80" d="M7.266,29.154l0.523-3.322l-1.165-0.027H1.061L4.927,1.292C4.939,1.218,4.978,1.149,5.035,1.1  c0.057-0.049,0.13-0.076,0.206-0.076h9.38c3.114,0,5.263,0.648,6.385,1.927c0.526,0.6,0.861,1.227,1.023,1.917  c0.17,0.724,0.173,1.589,0.007,2.644l-0.012,0.077v0.676l0.526,0.298c0.443,0.235,0.795,0.504,1.065,0.812  c0.45,0.513,0.741,1.165,0.864,1.938c0.127,0.795,0.085,1.741-0.123,2.812c-0.24,1.232-0.628,2.305-1.152,3.183  c-0.482,0.809-1.096,1.48-1.825,2c-0.696,0.494-1.523,0.869-2.458,1.109c-0.906,0.236-1.939,0.355-3.072,0.355h-0.73  c-0.522,0-1.029,0.188-1.427,0.525c-0.399,0.344-0.663,0.814-0.744,1.328l-0.055,0.299l-0.924,5.855l-0.042,0.215  c-0.011,0.068-0.03,0.102-0.058,0.125c-0.025,0.021-0.061,0.035-0.096,0.035H7.266z"/>
+<path fill="#179BD7" d="M23.048,7.667L23.048,7.667L23.048,7.667c-0.028,0.179-0.06,0.362-0.096,0.55  c-1.237,6.351-5.469,8.545-10.874,8.545H9.326c-0.661,0-1.218,0.48-1.321,1.132l0,0l0,0L6.596,26.83l-0.399,2.533  c-0.067,0.428,0.263,0.814,0.695,0.814h4.881c0.578,0,1.069-0.42,1.16-0.99l0.048-0.248l0.919-5.832l0.059-0.32  c0.09-0.572,0.582-0.992,1.16-0.992h0.73c4.729,0,8.431-1.92,9.513-7.476c0.452-2.321,0.218-4.259-0.978-5.622  C24.022,8.286,23.573,7.945,23.048,7.667z"/>
+<path fill="#222D65" d="M21.754,7.151c-0.189-0.055-0.384-0.105-0.584-0.15c-0.201-0.044-0.407-0.083-0.619-0.117  c-0.742-0.12-1.555-0.177-2.426-0.177h-7.352c-0.181,0-0.353,0.041-0.507,0.115C9.927,6.985,9.675,7.306,9.614,7.699L8.05,17.605  l-0.045,0.289c0.103-0.652,0.66-1.132,1.321-1.132h2.752c5.405,0,9.637-2.195,10.874-8.545c0.037-0.188,0.068-0.371,0.096-0.55  c-0.313-0.166-0.652-0.308-1.017-0.429C21.941,7.208,21.848,7.179,21.754,7.151z"/>
+<path fill="#253B80" d="M9.614,7.699c0.061-0.393,0.313-0.714,0.652-0.876c0.155-0.074,0.326-0.115,0.507-0.115h7.352  c0.871,0,1.684,0.057,2.426,0.177c0.212,0.034,0.418,0.073,0.619,0.117c0.2,0.045,0.395,0.095,0.584,0.15  c0.094,0.028,0.187,0.057,0.278,0.086c0.365,0.121,0.704,0.264,1.017,0.429c0.368-2.347-0.003-3.945-1.272-5.392  C20.378,0.682,17.853,0,14.622,0h-9.38c-0.66,0-1.223,0.48-1.325,1.133L0.01,25.898c-0.077,0.49,0.301,0.932,0.795,0.932h5.791  l1.454-9.225L9.614,7.699z"/>
+</svg>

src/pretix/plugins/paypal/templates/pretixplugins/paypal/checkout_payment_confirm.html

@@ -0,0 +1,6 @@
+{% load i18n %}
+
+<p>{% blocktrans trimmed %}
+    The total amount listed above will be withdrawn from your PayPal account after the
+    confirmation of your purchase.
+{% endblocktrans %}</p>

src/pretix/plugins/paypal/templates/pretixplugins/paypal/checkout_payment_form.html

@@ -0,0 +1,6 @@
+{% load i18n %}
+
+<p>{% blocktrans trimmed %}
+    After you clicked continue, we will redirect you to PayPal to fill in your payment
+    details. You will then be redirected back here to review and confirm your order.
+{% endblocktrans %}</p>

src/pretix/plugins/paypal/templates/pretixplugins/paypal/control.html

@@ -0,0 +1,18 @@
+{% load i18n %}
+
+{% if payment_info %}
+    <dl class="dl-horizontal">
+        <dt>{% trans "Payment ID" %}</dt>
+        <dd>{{ payment_info.id }}</dd>
+        <dt>{% trans "Sale ID" %}</dt>
+        <dd>{{ sale_id|default_if_none:"?" }}</dd>
+        <dt>{% trans "Payer" %}</dt>
+        <dd>{{ payment_info.payer.payer_info.email }}</dd>
+        <dt>{% trans "Last update" %}</dt>
+        <dd>{{ payment_info.update_time }}</dd>
+        <dt>{% trans "Total value" %}</dt>
+        <dd>{{ payment_info.transactions.0.amount.total }}</dd>
+        <dt>{% trans "Currency" %}</dt>
+        <dd>{{ payment_info.transactions.0.amount.currency }}</dd>
+    </dl>
+{% endif %}

src/pretix/plugins/paypal/templates/pretixplugins/paypal/pending.html

@@ -0,0 +1,12 @@
+{% load i18n %}
+
+{% if retry %}
+    <p>{% blocktrans trimmed %}
+        Our attempt to execute your Payment via PayPal has failed. Please try again or contact us.
+    {% endblocktrans %}</p>
+{% else %}
+    <p>{% blocktrans trimmed %}
+        We're waiting for an answer from PayPal regarding your payment. Please contact us, if this
+        takes more than a few hours.
+    {% endblocktrans %}</p>
+{% endif %}

src/pretix/plugins/paypal/urls.py

@@ -0,0 +1,39 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+from django.urls import include, re_path
+
+from .views import abort, oauth_disconnect, success
+
+event_patterns = [
+    re_path(r'^paypal/', include([
+        re_path(r'^abort/$', abort, name='abort'),
+        re_path(r'^return/$', success, name='return'),
+
+        re_path(r'w/(?P<cart_namespace>[a-zA-Z0-9]{16})/abort/', abort, name='abort'),
+        re_path(r'w/(?P<cart_namespace>[a-zA-Z0-9]{16})/return/', success, name='return'),
+    ])),
+]
+
+urlpatterns = [
+    re_path(r'^control/event/(?P<organizer>[^/]+)/(?P<event>[^/]+)/paypal/disconnect/',
+            oauth_disconnect, name='oauth.disconnect'),
+]

src/pretix/plugins/paypal/views.py

@@ -0,0 +1,249 @@
+#
+# This file is part of pretix (Community Edition).
+#
+# Copyright (C) 2014-2020  Raphael Michel and contributors
+# Copyright (C) 2020-today pretix GmbH and contributors
+#
+# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
+# Public License as published by the Free Software Foundation in version 3 of the License.
+#
+# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
+# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
+# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
+# this file, see <https://pretix.eu/about/en/license>.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
+# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
+# details.
+#
+# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
+# <https://www.gnu.org/licenses/>.
+#
+
+# This file is based on an earlier version of pretix which was released under the Apache License 2.0. The full text of
+# the Apache License 2.0 can be obtained at <http://www.apache.org/licenses/LICENSE-2.0>.
+#
+# This file may have since been changed and any changes are released under the terms of AGPLv3 as described above. A
+# full history of changes and contributors is available at <https://github.com/pretix/pretix>.
+#
+# This file contains Apache-licensed contributions copyrighted by: Flavia Bastos
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the Apache License 2.0 is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under the License.
+
+import json
+import logging
+from decimal import Decimal
+
+import paypalrestsdk
+import paypalrestsdk.exceptions
+from django.contrib import messages
+from django.db.models import Sum
+from django.http import HttpResponse
+from django.urls import reverse
+from django.utils.translation import gettext_lazy as _
+from django.views.decorators.csrf import csrf_exempt
+from django.views.decorators.http import require_POST
+from django_scopes import scopes_disabled
+
+from pretix.base.models import Order, OrderPayment, OrderRefund, Quota
+from pretix.base.payment import PaymentException
+from pretix.control.permissions import event_permission_required
+from pretix.helpers.http import redirect_to_url
+from pretix.multidomain.urlreverse import eventreverse
+from pretix.plugins.paypal.models import ReferencedPayPalObject
+from pretix.plugins.paypal.payment import Paypal
+
+logger = logging.getLogger('pretix.plugins.paypal')
+
+
+def success(request, *args, **kwargs):
+    pid = request.GET.get('paymentId')
+    token = request.GET.get('token')
+    payer = request.GET.get('PayerID')
+    request.session['payment_paypal_token'] = token
+    request.session['payment_paypal_payer'] = payer
+
+    urlkwargs = {}
+    if 'cart_namespace' in kwargs:
+        urlkwargs['cart_namespace'] = kwargs['cart_namespace']
+
+    if request.session.get('payment_paypal_payment'):
+        payment = OrderPayment.objects.get(pk=request.session.get('payment_paypal_payment'))
+    else:
+        payment = None
+
+    if pid == request.session.get('payment_paypal_id', None):
+        if payment:
+            prov = Paypal(request.event)
+            try:
+                resp = prov.execute_payment(request, payment)
+            except PaymentException as e:
+                messages.error(request, str(e))
+                urlkwargs['step'] = 'payment'
+                return redirect_to_url(eventreverse(request.event, 'presale:event.checkout', kwargs=urlkwargs))
+            if resp:
+                return resp
+    else:
+        messages.error(request, _('Invalid response from PayPal received.'))
+        logger.error('Session did not contain payment_paypal_id')
+        urlkwargs['step'] = 'payment'
+        return redirect_to_url(eventreverse(request.event, 'presale:event.checkout', kwargs=urlkwargs))
+
+    if payment:
+        return redirect_to_url(eventreverse(request.event, 'presale:event.order', kwargs={
+            'order': payment.order.code,
+            'secret': payment.order.secret
+        }) + ('?paid=yes' if payment.order.status == Order.STATUS_PAID else ''))
+    else:
+        urlkwargs['step'] = 'confirm'
+        return redirect_to_url(eventreverse(request.event, 'presale:event.checkout', kwargs=urlkwargs))
+
+
+def abort(request, *args, **kwargs):
+    messages.error(request, _('It looks like you canceled the PayPal payment'))
+
+    if request.session.get('payment_paypal_payment'):
+        payment = OrderPayment.objects.get(pk=request.session.get('payment_paypal_payment'))
+    else:
+        payment = None
+
+    if payment:
+        return redirect_to_url(eventreverse(request.event, 'presale:event.order', kwargs={
+            'order': payment.order.code,
+            'secret': payment.order.secret
+        }) + ('?paid=yes' if payment.order.status == Order.STATUS_PAID else ''))
+    else:
+        return redirect_to_url(eventreverse(request.event, 'presale:event.checkout', kwargs={'step': 'payment'}))
+
+
+@csrf_exempt
+@require_POST
+@scopes_disabled()
+def webhook(request, *args, **kwargs):
+    event_body = request.body.decode('utf-8').strip()
+    event_json = json.loads(event_body)
+
+    # We do not check the signature, we just use it as a trigger to look the charge up.
+    if 'resource_type' not in event_json:
+        return HttpResponse("Invalid body, no resource_type given", status=400)
+    if event_json['resource_type'] not in ('sale', 'refund'):
+        return HttpResponse("Not interested in this resource type", status=200)
+
+    if event_json['resource_type'] == 'sale':
+        saleid = event_json['resource']['id']
+    else:
+        saleid = event_json['resource']['sale_id']
+
+    try:
+        refs = [saleid]
+        if event_json['resource'].get('parent_payment'):
+            refs.append(event_json['resource'].get('parent_payment'))
+
+        rso = ReferencedPayPalObject.objects.select_related('order', 'order__event').get(
+            reference__in=refs
+        )
+        event = rso.order.event
+    except ReferencedPayPalObject.DoesNotExist:
+        rso = None
+        if hasattr(request, 'event'):
+            event = request.event
+        else:
+            return HttpResponse("Unable to detect event", status=200)
+
+    prov = Paypal(event)
+    prov.init_api()
+
+    try:
+        sale = paypalrestsdk.Sale.find(saleid)
+    except paypalrestsdk.exceptions.ConnectionError:
+        logger.exception('PayPal error on webhook. Event data: %s' % str(event_json))
+        return HttpResponse('Sale not found', status=500)
+
+    if rso and rso.payment:
+        payment = rso.payment
+    else:
+        payments = OrderPayment.objects.filter(order__event=event, provider='paypal',
+                                               info__icontains=sale['id'])
+        payment = None
+        for p in payments:
+            payment_info = p.info_data
+            for res in payment_info['transactions'][0]['related_resources']:
+                for k, v in res.items():
+                    if k == 'sale' and v['id'] == sale['id']:
+                        payment = p
+                        break
+
+    if not payment:
+        return HttpResponse('Payment not found', status=200)
+
+    payment.order.log_action('pretix.plugins.paypal.event', data=event_json)
+
+    if payment.state == OrderPayment.PAYMENT_STATE_CONFIRMED and sale['state'] in ('partially_refunded', 'refunded'):
+        if event_json['resource_type'] == 'refund':
+            try:
+                refund = paypalrestsdk.Refund.find(event_json['resource']['id'])
+            except paypalrestsdk.exceptions.ConnectionError:
+                logger.exception('PayPal error on webhook. Event data: %s' % str(event_json))
+                return HttpResponse('Refund not found', status=500)
+
+            known_refunds = {r.info_data.get('id'): r for r in payment.refunds.all()}
+            if refund['id'] not in known_refunds:
+                payment.create_external_refund(
+                    amount=abs(Decimal(refund['amount']['total'])),
+                    info=json.dumps(refund.to_dict() if not isinstance(refund, dict) else refund)
+                )
+            elif known_refunds.get(refund['id']).state in (
+                    OrderRefund.REFUND_STATE_CREATED, OrderRefund.REFUND_STATE_TRANSIT) and refund['state'] == 'completed':
+                known_refunds.get(refund['id']).done()
+
+            if 'total_refunded_amount' in refund:
+                known_sum = payment.refunds.filter(
+                    state__in=(OrderRefund.REFUND_STATE_DONE, OrderRefund.REFUND_STATE_TRANSIT,
+                               OrderRefund.REFUND_STATE_CREATED, OrderRefund.REFUND_SOURCE_EXTERNAL)
+                ).aggregate(s=Sum('amount'))['s'] or Decimal('0.00')
+                total_refunded_amount = Decimal(refund['total_refunded_amount']['value'])
+                if known_sum < total_refunded_amount:
+                    payment.create_external_refund(
+                        amount=total_refunded_amount - known_sum
+                    )
+        elif sale['state'] == 'refunded':
+            known_sum = payment.refunds.filter(
+                state__in=(OrderRefund.REFUND_STATE_DONE, OrderRefund.REFUND_STATE_TRANSIT,
+                           OrderRefund.REFUND_STATE_CREATED, OrderRefund.REFUND_SOURCE_EXTERNAL)
+            ).aggregate(s=Sum('amount'))['s'] or Decimal('0.00')
+
+            if known_sum < payment.amount:
+                payment.create_external_refund(
+                    amount=payment.amount - known_sum
+                )
+    elif payment.state in (OrderPayment.PAYMENT_STATE_PENDING, OrderPayment.PAYMENT_STATE_CREATED,
+                           OrderPayment.PAYMENT_STATE_CANCELED, OrderPayment.PAYMENT_STATE_FAILED) and sale['state'] == 'completed':
+        try:
+            payment.confirm()
+        except Quota.QuotaExceededException:
+            pass
+
+    return HttpResponse(status=200)
+
+
+@event_permission_required('event.settings.general:write')
+@require_POST
+def oauth_disconnect(request, **kwargs):
+    del request.event.settings.payment_paypal_connect_refresh_token
+    del request.event.settings.payment_paypal_connect_user_id
+    request.event.settings.payment_paypal__enabled = False
+    messages.success(request, _('Your PayPal account has been disconnected.'))
+
+    # Migrate User to PayPal v2
+    event = request.event
+    event.disable_plugin("pretix.plugins.paypal")
+    event.enable_plugin("pretix.plugins.paypal2")
+    event.save()
+
+    return redirect_to_url(reverse('control:event.settings.payment.provider', kwargs={
+        'organizer': request.event.organizer.slug,
+        'event': request.event.slug,
+        'provider': 'paypal_settings'
+    }))

src/pretix/plugins/paypal2/migrations/0001_initial.py

@@ -1,54 +0,0 @@
-# Generated by Django 5.2.17 on 2026-09-08 08:01
-
-import django.db.models.deletion
-from django.db import migrations, models
-
-
-class Migration(migrations.Migration):
-
-    initial = True
-
-    dependencies = [
-        ("pretixbase", "0310_question_valid_string_length_min"),
-    ]
-
-    operations = [
-        migrations.SeparateDatabaseAndState(
-            state_operations=[
-                migrations.CreateModel(
-                    name="ReferencedPayPalObject",
-                    fields=[
-                        (
-                            "id",
-                            models.BigAutoField(
-                                auto_created=True, primary_key=True, serialize=False
-                            ),
-                        ),
-                        (
-                            "reference",
-                            models.CharField(db_index=True, max_length=190, unique=True),
-                        ),
-                        (
-                            "order",
-                            models.ForeignKey(
-                                on_delete=django.db.models.deletion.CASCADE,
-                                to="pretixbase.order",
-                            ),
-                        ),
-                        (
-                            "payment",
-                            models.ForeignKey(
-                                null=True,
-                                on_delete=django.db.models.deletion.CASCADE,
-                                to="pretixbase.orderpayment",
-                            ),
-                        ),
-                    ],
-                    options={
-                        "db_table": "paypal_referencedpaypalobject",
-                    },
-                ),
-            ],
-            database_operations=[]
-        )
-    ]

src/pretix/plugins/paypal2/payment.py

@@ -68,7 +68,7 @@ from pretix.plugins.paypal2.client.core.paypal_http_client import (
 from pretix.plugins.paypal2.client.customer.partner_referral_create_request import (
     PartnerReferralCreateRequest,
 )
-from pretix.plugins.paypal2.models import ReferencedPayPalObject
+from pretix.plugins.paypal.models import ReferencedPayPalObject
 
 logger = logging.getLogger('pretix.plugins.paypal2')
 

src/pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js

@@ -1,350 +1,350 @@
-/*global $, paypal_client_id, paypal_loadingmessage, gettext */
-'use strict';
+/* global paypal_client_id, paypal_loadingmessage, gettext */
+'use strict'
 
 var pretixpaypal = {
-    paypal: null,
-    client_id: null,
-    order_id: null,
-    payer_id: null,
-    merchant_id: null,
-    currency: null,
-    method: null,
-    additional_disabled_funding: null,
-    additional_enabled_funding: null,
-    debug_buyer_country: null,
-    continue_button: null,
-    paypage: false,
-    method_map: {
-        wallet: {
-            method: 'wallet',
-            funding_source: 'paypal',
-            //disable_funding: null,
-            //enable_funding: 'paylater',
-            early_auth: true,
-        },
-        apm: {
-            method: 'apm',
-            funding_source: null,
-            //disable_funding: null,
-            //enable_funding: null,
-            early_auth: false,
-        }
-    },
-    apm_map: {
-        paypal: gettext('PayPal'),
-        venmo: gettext('Venmo'),
-        applepay: gettext('Apple Pay'),
-        itau: gettext('Itaú'),
-        credit: gettext('PayPal Credit'),
-        card: gettext('Credit Card'),
-        paylater: gettext('PayPal Pay Later'),
-        ideal: gettext('iDEAL | Wero'),
-        sepa: gettext('SEPA Direct Debit'),
-        bancontact: gettext('Bancontact'),
-        giropay: gettext('giropay'),
-        sofort: gettext('SOFORT'),
-        eps: gettext('eps'),
-        mybank: gettext('MyBank'),
-        p24: gettext('Przelewy24'),
-        verkkopankki: gettext('Verkkopankki'),
-        payu: gettext('PayU'),
-        blik: gettext('BLIK'),
-        trustly: gettext('Trustly'),
-        zimpler: gettext('Zimpler'),
-        maxima: gettext('Maxima'),
-        oxxo: gettext('OXXO'),
-        boleto: gettext('Boleto'),
-        wechatpay: gettext('WeChat Pay'),
-        mercadopago: gettext('Mercado Pago')
-    },
-    readyToSubmitApproval: false,
+	paypal: null,
+	client_id: null,
+	order_id: null,
+	payer_id: null,
+	merchant_id: null,
+	currency: null,
+	method: null,
+	additional_disabled_funding: null,
+	additional_enabled_funding: null,
+	debug_buyer_country: null,
+	continue_button: null,
+	paypage: false,
+	method_map: {
+		wallet: {
+			method: 'wallet',
+			funding_source: 'paypal',
+			// disable_funding: null,
+			// enable_funding: 'paylater',
+			early_auth: true,
+		},
+		apm: {
+			method: 'apm',
+			funding_source: null,
+			// disable_funding: null,
+			// enable_funding: null,
+			early_auth: false,
+		}
+	},
+	apm_map: {
+		paypal: gettext('PayPal'),
+		venmo: gettext('Venmo'),
+		applepay: gettext('Apple Pay'),
+		itau: gettext('Itaú'),
+		credit: gettext('PayPal Credit'),
+		card: gettext('Credit Card'),
+		paylater: gettext('PayPal Pay Later'),
+		ideal: gettext('iDEAL | Wero'),
+		sepa: gettext('SEPA Direct Debit'),
+		bancontact: gettext('Bancontact'),
+		giropay: gettext('giropay'),
+		sofort: gettext('SOFORT'),
+		eps: gettext('eps'),
+		mybank: gettext('MyBank'),
+		p24: gettext('Przelewy24'),
+		verkkopankki: gettext('Verkkopankki'),
+		payu: gettext('PayU'),
+		blik: gettext('BLIK'),
+		trustly: gettext('Trustly'),
+		zimpler: gettext('Zimpler'),
+		maxima: gettext('Maxima'),
+		oxxo: gettext('OXXO'),
+		boleto: gettext('Boleto'),
+		wechatpay: gettext('WeChat Pay'),
+		mercadopago: gettext('Mercado Pago')
+	},
+	readyToSubmitApproval: false,
 
-    load: function () {
-        if (pretixpaypal.paypal === null) {
-            pretixpaypal.client_id = $.trim($("#paypal_client_id").html());
-            pretixpaypal.merchant_id = $.trim($("#paypal_merchant_id").html());
-            pretixpaypal.debug_buyer_country = $.trim($("#paypal_buyer_country").html());
-            pretixpaypal.continue_button = $('.checkout-button-row').closest("form").find(".checkout-button-row .btn-primary");
-            pretixpaypal.continue_button.closest('div').append('<div id="paypal-button-container"></div>');
-            pretixpaypal.additional_disabled_funding = $.trim($("#paypal_disable_funding").html());
-            pretixpaypal.additional_enabled_funding = $.trim($("#paypal_enable_funding").html());
-            pretixpaypal.paypage = Boolean($('#paypal-button-container').data('paypage'));
-            pretixpaypal.order_id = $.trim($("#paypal_oid").html());
-            pretixpaypal.currency = $("body").attr("data-currency");
-            pretixpaypal.locale = this.guessLocale();
-        }
+	load: function () {
+		if (pretixpaypal.paypal === null) {
+			pretixpaypal.client_id = $.trim($('#paypal_client_id').html())
+			pretixpaypal.merchant_id = $.trim($('#paypal_merchant_id').html())
+			pretixpaypal.debug_buyer_country = $.trim($('#paypal_buyer_country').html())
+			pretixpaypal.continue_button = $('.checkout-button-row').closest('form').find('.checkout-button-row .btn-primary')
+			pretixpaypal.continue_button.closest('div').append('<div id="paypal-button-container"></div>')
+			pretixpaypal.additional_disabled_funding = $.trim($('#paypal_disable_funding').html())
+			pretixpaypal.additional_enabled_funding = $.trim($('#paypal_enable_funding').html())
+			pretixpaypal.paypage = Boolean($('#paypal-button-container').data('paypage'))
+			pretixpaypal.order_id = $.trim($('#paypal_oid').html())
+			pretixpaypal.currency = $('body').attr('data-currency')
+			pretixpaypal.locale = this.guessLocale()
+		}
 
-        $("input[name=payment][value^='paypal']").change(function () {
-            if (pretixpaypal.paypal !== null) {
-                pretixpaypal.renderButton($(this).val());
-            } else {
-                pretixpaypal.continue_button.prop("disabled", true);
-            }
-        });
+		$('input[name=payment][value^=\'paypal\']').change(function () {
+			if (pretixpaypal.paypal !== null) {
+				pretixpaypal.renderButton($(this).val())
+			} else {
+				pretixpaypal.continue_button.prop('disabled', true)
+			}
+		})
 
-        $("input[name=payment]").not("[value^='paypal']").change(function () {
-            pretixpaypal.restore();
-        });
+		$('input[name=payment]').not('[value^=\'paypal\']').change(function () {
+			pretixpaypal.restore()
+		})
 
-        // If paypal is pre-selected, we must disable the continue button and handle it after SDK is loaded
-        if ($("input[name=payment][value^='paypal']").is(':checked')) {
-            pretixpaypal.continue_button.prop("disabled", true);
-        }
+		// If paypal is pre-selected, we must disable the continue button and handle it after SDK is loaded
+		if ($('input[name=payment][value^=\'paypal\']').is(':checked')) {
+			pretixpaypal.continue_button.prop('disabled', true)
+		}
 
-        // We are setting the cogwheel already here, as the renderAPM() method might take some time to get loaded.
-        const apmtextselector = $("input[name=payment][value=paypal_apm]").closest("label").find(".accordion-label-text");
-        apmtextselector.append(' <span aria-hidden="true" class="fa fa-cog fa-spin"></span>');
+		// We are setting the cogwheel already here, as the renderAPM() method might take some time to get loaded.
+		const apmtextselector = $('input[name=payment][value=paypal_apm]').closest('label').find('.accordion-label-text')
+		apmtextselector.append(' <span aria-hidden="true" class="fa fa-cog fa-spin"></span>')
 
-        let sdk_url = 'https://www.paypal.com/sdk/js' +
-            '?client-id=' + pretixpaypal.client_id +
-            '&components=buttons,funding-eligibility' +
-            '&currency=' + pretixpaypal.currency;
+		let sdk_url = 'https://www.paypal.com/sdk/js'
+			+ '?client-id=' + pretixpaypal.client_id
+			+ '&components=buttons,funding-eligibility'
+			+ '&currency=' + pretixpaypal.currency
 
-        if (pretixpaypal.locale) {
-            sdk_url += '&locale=' + pretixpaypal.locale;
-        }
+		if (pretixpaypal.locale) {
+			sdk_url += '&locale=' + pretixpaypal.locale
+		}
 
-        if (pretixpaypal.merchant_id) {
-            sdk_url += '&merchant-id=' + pretixpaypal.merchant_id;
-        }
+		if (pretixpaypal.merchant_id) {
+			sdk_url += '&merchant-id=' + pretixpaypal.merchant_id
+		}
 
-        if (pretixpaypal.additional_disabled_funding) {
-            sdk_url += '&disable-funding=' + [pretixpaypal.additional_disabled_funding].filter(Boolean).join(',');
-        }
+		if (pretixpaypal.additional_disabled_funding) {
+			sdk_url += '&disable-funding=' + [pretixpaypal.additional_disabled_funding].filter(Boolean).join(',')
+		}
 
-        if (pretixpaypal.additional_enabled_funding) {
-            sdk_url += '&enable-funding=' + [pretixpaypal.additional_enabled_funding].filter(Boolean).join(',');
-        }
+		if (pretixpaypal.additional_enabled_funding) {
+			sdk_url += '&enable-funding=' + [pretixpaypal.additional_enabled_funding].filter(Boolean).join(',')
+		}
 
-        if (pretixpaypal.debug_buyer_country) {
-            sdk_url += '&buyer-country=' + pretixpaypal.debug_buyer_country;
-        }
+		if (pretixpaypal.debug_buyer_country) {
+			sdk_url += '&buyer-country=' + pretixpaypal.debug_buyer_country
+		}
 
-        let ppscript = document.createElement('script');
-        let ready = false;
-        let head = document.getElementsByTagName("head")[0];
-        ppscript.setAttribute('src', sdk_url);
-        ppscript.setAttribute('data-csp-nonce', $.trim($("#csp_nonce").html()));
-        ppscript.setAttribute('data-page-type', 'checkout');
-        ppscript.setAttribute('data-partner-attribution-id', 'ramiioGmbH_Cart_PPCP');
-        document.head.appendChild(ppscript);
+		let ppscript = document.createElement('script')
+		let ready = false
+		let head = document.getElementsByTagName('head')[0]
+		ppscript.setAttribute('src', sdk_url)
+		ppscript.setAttribute('data-csp-nonce', $.trim($('#csp_nonce').html()))
+		ppscript.setAttribute('data-page-type', 'checkout')
+		ppscript.setAttribute('data-partner-attribution-id', 'ramiioGmbH_Cart_PPCP')
+		document.head.appendChild(ppscript)
 
-        ppscript.onload = ppscript.onreadystatechange = function () {
-            if (!ready && (!this.readyState || this.readyState === "loaded" || this.readyState === "complete")) {
-                ready = true;
+		ppscript.onload = ppscript.onreadystatechange = function () {
+			if (!ready && (!this.readyState || this.readyState === 'loaded' || this.readyState === 'complete')) {
+				ready = true
 
-                pretixpaypal.paypal = paypal;
+				pretixpaypal.paypal = paypal
 
-                // Handle memory leak in IE
-                ppscript.onload = ppscript.onreadystatechange = null;
-                if (head && ppscript.parentNode) {
-                    head.removeChild(ppscript);
-                }
-            }
-        };
+				// Handle memory leak in IE
+				ppscript.onload = ppscript.onreadystatechange = null
+				if (head && ppscript.parentNode) {
+					head.removeChild(ppscript)
+				}
+			}
+		}
 
-        document.addEventListener("visibilitychange", this.onApproveSubmit);
-    },
+		document.addEventListener('visibilitychange', this.onApproveSubmit)
+	},
 
-    ready: function () {
-        if ($("input[name=payment][value=paypal_apm]").length > 0) {
-            pretixpaypal.renderAPMs();
-        }
+	ready: function () {
+		if ($('input[name=payment][value=paypal_apm]').length > 0) {
+			pretixpaypal.renderAPMs()
+		}
 
-        if ($("input[name=payment][value^='paypal']").is(':checked')) {
-            pretixpaypal.renderButton($("input[name=payment][value^='paypal']:checked").val());
-        } else if ($(".payment-redo-form").length) {
-            pretixpaypal.renderButton($("input[name=payment][value^='paypal']").val());
-        } else if ($('#paypal-button-container').data('paypage')) {
-            pretixpaypal.renderButton('paypal_apm');
-        }
-    },
+		if ($('input[name=payment][value^=\'paypal\']').is(':checked')) {
+			pretixpaypal.renderButton($('input[name=payment][value^=\'paypal\']:checked').val())
+		} else if ($('.payment-redo-form').length) {
+			pretixpaypal.renderButton($('input[name=payment][value^=\'paypal\']').val())
+		} else if ($('#paypal-button-container').data('paypage')) {
+			pretixpaypal.renderButton('paypal_apm')
+		}
+	},
 
-    restore: function () {
-        // if PayPal has not been initialized, there shouldn't be anything to cleanup
-        if (pretixpaypal.paypal !== null) {
-            $('#paypal-button-container').empty()
-            pretixpaypal.continue_button.text(gettext('Continue'));
-            pretixpaypal.continue_button.show();
-        }
-        pretixpaypal.continue_button.prop("disabled", false);
-    },
+	restore: function () {
+		// if PayPal has not been initialized, there shouldn't be anything to cleanup
+		if (pretixpaypal.paypal !== null) {
+			$('#paypal-button-container').empty()
+			pretixpaypal.continue_button.text(gettext('Continue'))
+			pretixpaypal.continue_button.show()
+		}
+		pretixpaypal.continue_button.prop('disabled', false)
+	},
 
-    renderButton: function (method) {
-        if (method === 'paypal') {
-            method = "wallet"
-        } else {
-            method = method.split('paypal_').at(-1)
-        }
-        pretixpaypal.method = pretixpaypal.method_map[method];
+	renderButton: function (method) {
+		if (method === 'paypal') {
+			method = 'wallet'
+		} else {
+			method = method.split('paypal_').at(-1)
+		}
+		pretixpaypal.method = pretixpaypal.method_map[method]
 
-        if (pretixpaypal.method.method === 'apm' && !pretixpaypal.paypage) {
-            pretixpaypal.restore();
-            return;
-        }
+		if (pretixpaypal.method.method === 'apm' && !pretixpaypal.paypage) {
+			pretixpaypal.restore()
+			return
+		}
 
-        $('#paypal-button-container').empty()
-        $('#paypal-card-container').empty()
+		$('#paypal-button-container').empty()
+		$('#paypal-card-container').empty()
 
-        let button = pretixpaypal.paypal.Buttons({
-            fundingSource: pretixpaypal.method.funding_source,
-            style: {
-                layout: pretixpaypal.method.early_auth ? 'horizontal' : 'vertical',
-                //color: 'white',
-                shape: 'rect',
-                label: 'pay',
-                tagline: false
-            },
-            createOrder: function (data, actions) {
-                if (pretixpaypal.order_id) {
-                    return pretixpaypal.order_id;
-                }
+		let button = pretixpaypal.paypal.Buttons({
+			fundingSource: pretixpaypal.method.funding_source,
+			style: {
+				layout: pretixpaypal.method.early_auth ? 'horizontal' : 'vertical',
+				// color: 'white',
+				shape: 'rect',
+				label: 'pay',
+				tagline: false
+			},
+			createOrder: function (data, actions) {
+				if (pretixpaypal.order_id) {
+					return pretixpaypal.order_id
+				}
 
-                // On the paypal:pay view, we already pregenerated the OID.
-                // Since this view is also only used for APMs, we only need the XHR-calls for the Smart Payment Buttons.
-                if (pretixpaypal.paypage) {
-                    return $("#payment_paypal_" + pretixpaypal.method.method + "_oid");
-                } else {
-                    var xhrurl = $("#payment_paypal_" + pretixpaypal.method.method + "_xhr").val();
-                }
+				// On the paypal:pay view, we already pregenerated the OID.
+				// Since this view is also only used for APMs, we only need the XHR-calls for the Smart Payment Buttons.
+				if (pretixpaypal.paypage) {
+					return $('#payment_paypal_' + pretixpaypal.method.method + '_oid')
+				} else {
+					var xhrurl = $('#payment_paypal_' + pretixpaypal.method.method + '_xhr').val()
+				}
 
-                return fetch(xhrurl, {
-                    method: 'POST'
-                }).then(function (res) {
-                    return res.json();
-                }).then(function (data) {
-                    if ('id' in data) {
-                        return data.id;
-                    } else {
-                        // Refreshing the page to surface the request-error message
-                        location.reload();
-                    }
-                });
-            },
-            onApprove: function (data, actions) {
-                waitingDialog.show(gettext("Confirming your payment …"));
-                pretixpaypal.order_id = data.orderID;
-                pretixpaypal.payer_id = data.payerID;
+				return fetch(xhrurl, {
+					method: 'POST'
+				}).then(function (res) {
+					return res.json()
+				}).then(function (data) {
+					if ('id' in data) {
+						return data.id
+					} else {
+						// Refreshing the page to surface the request-error message
+						location.reload()
+					}
+				})
+			},
+			onApprove: function (data, actions) {
+				waitingDialog.show(gettext('Confirming your payment …'))
+				pretixpaypal.order_id = data.orderID
+				pretixpaypal.payer_id = data.payerID
 
-                let method = pretixpaypal.paypage ? "wallet" : pretixpaypal.method.method;
-                let selectorstub = "#payment_paypal_" + method;
-                // Insert the tokens into the form, so it gets submitted to the server
-                $(selectorstub + "_oid").val(pretixpaypal.order_id);
-                $(selectorstub + "_payer").val(pretixpaypal.payer_id);
+				let method = pretixpaypal.paypage ? 'wallet' : pretixpaypal.method.method
+				let selectorstub = '#payment_paypal_' + method
+				// Insert the tokens into the form, so it gets submitted to the server
+				$(selectorstub + '_oid').val(pretixpaypal.order_id)
+				$(selectorstub + '_payer').val(pretixpaypal.payer_id)
 
-                // We are moving the submission to a separate function, which is also an EventListener, since
-                // SFSafariView refuses to submit a form that is not visible. Unfortunately, that is exactly the case
-                // when the ticket shop is used on iOS within an SFSafariView and the PayPal payment popup has not
-                // closed itself quickly enough.
-                pretixpaypal.readyToSubmitApproval = true;
-                pretixpaypal.onApproveSubmit();
+				// We are moving the submission to a separate function, which is also an EventListener, since
+				// SFSafariView refuses to submit a form that is not visible. Unfortunately, that is exactly the case
+				// when the ticket shop is used on iOS within an SFSafariView and the PayPal payment popup has not
+				// closed itself quickly enough.
+				pretixpaypal.readyToSubmitApproval = true
+				pretixpaypal.onApproveSubmit()
 
-                // billingToken: null
-                // facilitatorAccessToken: "A21AAL_fEu0gDD-sIXyOy65a6MjgSJJrhmxuPcxxUGnL5gW2DzTxiiAksfoC4x8hD-BjeY1LsFVKl7ceuO7UR1a9pQr8Q_AVw"
-                // orderID: "7RF70259NY7589848"
-                // payerID: "8M3BU92Z97VXA"
-                // paymentID: null
-            },
-        });
+				// billingToken: null
+				// facilitatorAccessToken: "A21AAL_fEu0gDD-sIXyOy65a6MjgSJJrhmxuPcxxUGnL5gW2DzTxiiAksfoC4x8hD-BjeY1LsFVKl7ceuO7UR1a9pQr8Q_AVw"
+				// orderID: "7RF70259NY7589848"
+				// payerID: "8M3BU92Z97VXA"
+				// paymentID: null
+			},
+		})
 
-        if (button.isEligible()) {
-            button.render('#paypal-button-container');
-            pretixpaypal.continue_button.hide();
-        } else {
-            pretixpaypal.continue_button.text(gettext('Payment method unavailable'));
-            pretixpaypal.continue_button.show();
-        }
-    },
+		if (button.isEligible()) {
+			button.render('#paypal-button-container')
+			pretixpaypal.continue_button.hide()
+		} else {
+			pretixpaypal.continue_button.text(gettext('Payment method unavailable'))
+			pretixpaypal.continue_button.show()
+		}
+	},
 
-    onApproveSubmit: function() {
-        if (document.visibilityState === "visible" && pretixpaypal.readyToSubmitApproval === true) {
-            let method = pretixpaypal.paypage ? "wallet" : pretixpaypal.method.method;
-            let selectorstub = "#payment_paypal_" + method;
-            var $form = $(selectorstub + "_oid").closest("form");
+	onApproveSubmit: function () {
+		if (document.visibilityState === 'visible' && pretixpaypal.readyToSubmitApproval === true) {
+			let method = pretixpaypal.paypage ? 'wallet' : pretixpaypal.method.method
+			let selectorstub = '#payment_paypal_' + method
+			let $form = $(selectorstub + '_oid').closest('form')
 
-            $form.get(0).submit();
-        }
-    },
+			$form.get(0).submit()
+		}
+	},
 
-    renderAPMs: function () {
-        pretixpaypal.restore();
-        let inputselector = $("input[name=payment][value=paypal_apm]");
-        let textselector = inputselector.closest("label").find('.accordion-label-text');
-        let eligibles = [];
+	renderAPMs: function () {
+		pretixpaypal.restore()
+		let inputselector = $('input[name=payment][value=paypal_apm]')
+		let textselector = inputselector.closest('label').find('.accordion-label-text')
+		let eligibles = []
 
-        pretixpaypal.paypal.getFundingSources().forEach(function (fundingSource) {
-            // Let's always skip PayPal, since it's always a dedicated funding source
-            if (fundingSource === 'paypal') {
-                return;
-            }
+		pretixpaypal.paypal.getFundingSources().forEach(function (fundingSource) {
+			// Let's always skip PayPal, since it's always a dedicated funding source
+			if (fundingSource === 'paypal') {
+				return
+			}
 
-            // This could also be paypal.Marks() - but they only expose images instead of cleartext...
-            let button = pretixpaypal.paypal.Buttons({
-                fundingSource: fundingSource
-            });
+			// This could also be paypal.Marks() - but they only expose images instead of cleartext...
+			let button = pretixpaypal.paypal.Buttons({
+				fundingSource: fundingSource
+			})
 
-            if (button.isEligible()) {
-                eligibles.push(gettext(pretixpaypal.apm_map[fundingSource] || fundingSource));
-            }
-        });
+			if (button.isEligible()) {
+				eligibles.push(gettext(pretixpaypal.apm_map[fundingSource] || fundingSource))
+			}
+		})
 
-        inputselector.attr('title', eligibles.join(', '));
-        textselector.fadeOut(300, function () {
-            textselector.text(eligibles.join(', '));
-            textselector.fadeIn(300);
-        });
-    },
+		inputselector.attr('title', eligibles.join(', '))
+		textselector.fadeOut(300, function () {
+			textselector.text(eligibles.join(', '))
+			textselector.fadeIn(300)
+		})
+	},
 
-    guessLocale: function() {
-        // This is a horrible hackjob and does not at all take into consideration the actual locale.
-        // Instead, we only look at the language that the shop is currently being displayed in and make
-        // that into a locale.
-        let allowed_locales = [
-            'en_US',
-            'ar_DZ',
-            'fr_FR',
-            'es_ES',
-            'zh_CN',
-            'de_DE',
-            'nl_NL',
-            'pt_PT',
-            'cs_CZ',
-            'da_DK',
-            'fi_FI',
-            'el_GR',
-            'hu_HU',
-            'id_ID',
-            'he_IL',
-            'it_IT',
-            'ja_JP',
-            'ru_RU',
-            'no_NO',
-            'pl_PL',
-            'sk_SK',
-            'sv_SE',
-            'th_TH',
-            'tr_TR',
-        ]
-        let lang = $("body").attr("data-locale").split('-')[0];
-        return allowed_locales.find(element => element.startsWith(lang));
-    }
-};
+	guessLocale: function () {
+		// This is a horrible hackjob and does not at all take into consideration the actual locale.
+		// Instead, we only look at the language that the shop is currently being displayed in and make
+		// that into a locale.
+		let allowed_locales = [
+			'en_US',
+			'ar_DZ',
+			'fr_FR',
+			'es_ES',
+			'zh_CN',
+			'de_DE',
+			'nl_NL',
+			'pt_PT',
+			'cs_CZ',
+			'da_DK',
+			'fi_FI',
+			'el_GR',
+			'hu_HU',
+			'id_ID',
+			'he_IL',
+			'it_IT',
+			'ja_JP',
+			'ru_RU',
+			'no_NO',
+			'pl_PL',
+			'sk_SK',
+			'sv_SE',
+			'th_TH',
+			'tr_TR',
+		]
+		let lang = $('body').attr('data-locale').split('-')[0]
+		return allowed_locales.find(element => element.startsWith(lang))
+	}
+}
 
 $(function () {
-    // This script is always loaded if paypal is enabled as a payment method, regardless of
-    // whether it is available (it could e.g. be hidden or limited to certain countries).
-    // We do not want to unnecessarily load the sdk.
-    // If no paypal/paypal_apm payment option is present and we are not on
-    // the (APM) PayView, then we do not need the SDK.
-    if (!$("input[name=payment][value^='paypal']").length && !$('#paypal-button-container').data('paypage')) {
-        return
-    }
+	// This script is always loaded if paypal is enabled as a payment method, regardless of
+	// whether it is available (it could e.g. be hidden or limited to certain countries).
+	// We do not want to unnecessarily load the sdk.
+	// If no paypal/paypal_apm payment option is present and we are not on
+	// the (APM) PayView, then we do not need the SDK.
+	if (!$('input[name=payment][value^=\'paypal\']').length && !$('#paypal-button-container').data('paypage')) {
+		return
+	}
 
-    pretixpaypal.load();
+	pretixpaypal.load();
 
-    (async() => {
-        while(!pretixpaypal.paypal)
-            await new Promise(resolve => setTimeout(resolve, 1000));
-        pretixpaypal.ready();
-    })();
-});
+	(async () => {
+		while (!pretixpaypal.paypal)
+			await new Promise(resolve => setTimeout(resolve, 1000))
+		pretixpaypal.ready()
+	})()
+})

src/pretix/plugins/paypal2/views.py

@@ -67,10 +67,10 @@ from pretix.multidomain.urlreverse import eventreverse
 from pretix.plugins.paypal2.client.customer.partners_merchantintegrations_get_request import (
     PartnersMerchantIntegrationsGetRequest,
 )
-from pretix.plugins.paypal2.models import ReferencedPayPalObject
 from pretix.plugins.paypal2.payment import (
     PaypalMethod, PaypalMethod as Paypal, PaypalWallet,
 )
+from pretix.plugins.paypal.models import ReferencedPayPalObject
 from pretix.presale.views import get_cart
 from pretix.presale.views.cart import cart_session
 
@@ -350,8 +350,8 @@ def webhook(request, *args, **kwargs):
         return HttpResponse("Invalid body, no event_type given", status=400)
 
     if event_json['event_type'].startswith('PAYMENT.SALE.'):
-        logger.info(f"Received PPv1 webhook: {json.dumps(event_json)}")
-        return HttpResponse("PayPal V1 no longer supported", status=400)
+        from pretix.plugins.paypal.views import webhook
+        return webhook(request, *args, **kwargs)
     # V1/V2 Sorting -- End
 
     # We do not check the signature, we just use it as a trigger to look the charge up.

src/pretix/plugins/reports/exporters.py

@@ -55,6 +55,8 @@ from django_countries.fields import Country
 from reportlab.lib import colors
 from reportlab.lib.enums import TA_CENTER
 from reportlab.lib.units import mm
+from reportlab.lib.utils import simpleSplit
+from reportlab.pdfbase.pdfmetrics import stringWidth
 from reportlab.pdfgen.canvas import Canvas
 from reportlab.platypus import PageBreak, Spacer, Table, TableStyle
 
@@ -226,10 +228,20 @@ class ReportlabExportMixin:
     def page_header(self, canvas, doc):
         from reportlab.lib.units import mm
 
-        canvas.setFont('OpenSans', 10)
-        canvas.drawString(doc.leftMargin, self.pagesize[1] - 15 * mm, self.get_left_header_string())
+        font_name = 'OpenSans'
+        font_size = 10
+        left_string = self.get_left_header_string()
+        right_string = self.get_right_header_string()
+        right_width = stringWidth(right_string, font_name, font_size)
+        max_left_width = self.pagesize[0] - doc.leftMargin - doc.rightMargin - right_width - 5 * mm
+        left_string_lines = simpleSplit(left_string, font_name, font_size, max_left_width)
+        if len(left_string_lines) > 1:
+            left_string = left_string_lines[0] + " …"
+
+        canvas.setFont(font_name, font_size)
+        canvas.drawString(doc.leftMargin, self.pagesize[1] - 15 * mm, left_string)
         canvas.drawRightString(self.pagesize[0] - doc.rightMargin, self.pagesize[1] - 15 * mm,
-                               self.get_right_header_string())
+                               right_string)
         canvas.setStrokeColorRGB(0, 0, 0)
         canvas.line(doc.leftMargin, self.pagesize[1] - 17 * mm,
                     self.pagesize[0] - doc.rightMargin, self.pagesize[1] - 17 * mm)

src/pretix/plugins/sendmail/forms.py

@@ -56,18 +56,11 @@ from pretix.base.services.placeholders import FormPlaceholderMixin  # noqa
 class BaseMailForm(FormPlaceholderMixin, forms.Form):
     subject = forms.CharField(label=_("Subject"))
     message = forms.CharField(label=_("Message"))
-    attachment = CachedFileField(
-        label=_("Attachment"),
-        required=False,
-        ext_whitelist=settings.FILE_UPLOAD_EXTENSIONS_EMAIL_ATTACHMENT,
-        help_text=_('Sending an attachment increases the chance of your email not arriving or being sorted into spam folders. We recommend only using PDFs '
-                    'of no more than 2 MB in size.'),
-        max_size=settings.FILE_UPLOAD_MAX_SIZE_EMAIL_ATTACHMENT
-    )
 
     def __init__(self, *args, **kwargs):
         event = self.event = kwargs.pop('event')
         context_parameters = kwargs.pop('context_parameters')
+        request = kwargs.pop('request')
         super().__init__(*args, **kwargs)
         self.fields['subject'] = I18nFormField(
             label=_('Subject'),
@@ -79,6 +72,16 @@ class BaseMailForm(FormPlaceholderMixin, forms.Form):
             widget=I18nMarkdownTextarea, required=True,
             locales=event.settings.get('locales'),
         )
+        self.fields['attachment'] = CachedFileField(
+            label=_("Attachment"),
+            required=False,
+            ext_whitelist=settings.FILE_UPLOAD_EXTENSIONS_EMAIL_ATTACHMENT,
+            help_text=_(
+                'Sending an attachment increases the chance of your email not arriving or being sorted into spam folders. We recommend only using PDFs '
+                'of no more than 2 MB in size.'),
+            max_size=settings.FILE_UPLOAD_MAX_SIZE_EMAIL_ATTACHMENT,
+            request=request,
+        )
         self._set_field_placeholders('subject', context_parameters, rich=False)
         self._set_field_placeholders('message', context_parameters, rich=True)
 

src/pretix/plugins/sendmail/views.py

@@ -157,6 +157,7 @@ class BaseSenderView(EventPermissionRequiredMixin, FormView):
         kwargs = super().get_form_kwargs()
         kwargs['event'] = self.request.event
         kwargs['context_parameters'] = self.context_parameters
+        kwargs['request'] = self.request
         if 'from_log' in self.request.GET:
             try:
                 from_log_id = self.request.GET.get('from_log')
@@ -354,9 +355,9 @@ class OrderSendView(BaseSenderView):
             statusq |= Q(status=Order.STATUS_PENDING, require_approval=False, valid_if_pending=True)
         orders = qs.filter(statusq)
 
-        opq = OrderPosition.objects.filter(
+        opq = OrderPosition.objects.with_scopes_disabled().filter(
             Q(item_id__in=[i.pk for i in form.cleaned_data.get('items')]) | Q(Exists(
-                OrderPosition.objects.filter(
+                OrderPosition.objects.with_scopes_disabled().filter(
                     addon_to_id=OuterRef('pk'),
                     item_id__in=[i.pk for i in form.cleaned_data.get('items')]
                 )
@@ -366,36 +367,43 @@ class OrderSendView(BaseSenderView):
         )
 
         if form.cleaned_data.get('filter_checkins'):
-            ql = []
+            ci_filter = Q(pk__in=[])  # return nothing
 
             if form.cleaned_data.get('not_checked_in'):
+                consider_tickets_used_lists = list(self.request.event.checkin_lists.filter(consider_tickets_used=True).values_list("id", flat=True))
+
                 opq = opq.alias(
                     any_checkins=Exists(
-                        Checkin.all.filter(
-                            Q(position_id=OuterRef('pk')) | Q(position__addon_to_id=OuterRef('pk')),
-                            successful=True,
-                            list__consider_tickets_used=True,
+                        Checkin.objects.with_scopes_disabled().filter(
+                            position_id=OuterRef('pk'),
+                            list_id__in=consider_tickets_used_lists,
+                        )
+                    ) | Exists(
+                        Checkin.objects.with_scopes_disabled().filter(
+                            position__addon_to_id=OuterRef('pk'),
+                            list_id__in=consider_tickets_used_lists,
                         )
                     )
                 )
-                ql.append(Q(any_checkins=False))
+                ci_filter |= Q(any_checkins=False)
+
             if form.cleaned_data.get('checkin_lists'):
                 opq = opq.alias(
                     matching_checkins=Exists(
-                        Checkin.all.filter(
-                            Q(position_id=OuterRef('pk')) | Q(position__addon_to_id=OuterRef('pk')),
+                        Checkin.objects.with_scopes_disabled().filter(
+                            position_id=OuterRef('pk'),
+                            list_id__in=[i.pk for i in form.cleaned_data.get('checkin_lists', [])],
+                        )
+                    ) | Exists(
+                        Checkin.objects.with_scopes_disabled().filter(
+                            position__addon_to_id=OuterRef('pk'),
                             list_id__in=[i.pk for i in form.cleaned_data.get('checkin_lists', [])],
-                            successful=True
                         )
                     )
                 )
-                ql.append(Q(matching_checkins=True))
-            if len(ql) == 2:
-                opq = opq.filter(ql[0] | ql[1])
-            elif ql:
-                opq = opq.filter(ql[0])
-            else:
-                opq = opq.none()
+                ci_filter |= Q(matching_checkins=True)
+
+            opq = opq.filter(ci_filter)
 
         if form.cleaned_data.get('subevent'):
             opq = opq.filter(subevent=form.cleaned_data.get('subevent'))

src/pretix/plugins/statistics/static/pretixplugins/statistics/statistics.js

@@ -1,81 +1,81 @@
-/*globals $, Morris, gettext, django*/
-function gettext(msgid) {
-    if (typeof django !== 'undefined' && typeof django.gettext !== 'undefined') {
-        return django.gettext(msgid);
-    }
-    return msgid;
+/* globals Morris, django */
+function gettext (msgid) {
+	if (typeof django !== 'undefined' && typeof django.gettext !== 'undefined') {
+		return django.gettext(msgid)
+	}
+	return msgid
 }
 $(function () {
-    $(".chart").css("height", "250px");
-    new Morris.Area({
-        element: 'obd_chart',
-        data: JSON.parse($("#obd-data").html()),
-        xkey: 'date',
-        ykeys: ['ordered', 'paid'],
-        labels: [gettext('Placed orders'), gettext('Paid orders')],
-        lineColors: ['#3b1c4a', '#50a167'],
-        smooth: false,
-        resize: true,
-        fillOpacity: 0.3,
-        behaveLikeLine: true
-    });
-    new Morris.Area({
-        element: 'abd_chart',
-        data: JSON.parse($("#abd-data").html()),
-        xkey: 'date',
-        ykeys: ['ordered', 'paid'],
-        labels: [gettext('Attendees (ordered)'), gettext('Attendees (paid)')],
-        lineColors: ['#3b1c4a', '#50a167'],
-        smooth: false,
-        resize: true,
-        fillOpacity: 0.3,
-        behaveLikeLine: true
-    });
-    new Morris.Area({
-        element: 'abt_chart',
-        data: JSON.parse($("#abt-data").html()),
-        xkey: 'date',
-        ykeys: ['ordered', 'paid'],
-        labels: [gettext('Attendees (ordered)'), gettext('Attendees (paid)')],
-        lineColors: ['#3b1c4a', '#50a167'],
-        smooth: false,
-        resize: true,
-        fillOpacity: 0.3,
-        behaveLikeLine: true
-    });
-    new Morris.Area({
-        element: 'rev_chart',
-        data: JSON.parse($("#rev-data").html()),
-        xkey: 'date',
-        ykeys: ['revenue'],
-        labels: [gettext('Total revenue')],
-        smooth: false,
-        resize: true,
-        lineColors: ['#3b1c4a'],
-        fillOpacity: 0.3,
-        preUnits: $.trim($("#currency").html()) + ' '
-    });
-    new Morris.Bar({
-        element: 'obp_chart',
-        data: JSON.parse($("#obp-data").html()),
-        xkey: 'item_short',
-        ykeys: ['ordered', 'paid'],
-        labels: [gettext('Placed orders'), gettext('Paid orders')],
-        barColors: ['#3b1c4a', '#50a167'],
-        hoverCallback: function (index, options, content, row) {
-            console.log(content);
-            var $c = $("<div>" + content + "</div>");
-            var $label = $c.find(".morris-hover-row-label");
-            $label.text(row.item);
-            var newc = $label.get(0).outerHTML;
-            $c.find('.morris-hover-point').each(function (i, r) {
-                if ($.trim($(r).text().split("\n")[2]) !== "0") {
-                    newc += r.outerHTML;
-                }
-            });
-            return newc;
-        },
-        resize: true,
-        xLabelAngle: 30
-    });
-});
+	$('.chart').css('height', '250px')
+	new Morris.Area({
+		element: 'obd_chart',
+		data: JSON.parse($('#obd-data').html()),
+		xkey: 'date',
+		ykeys: ['ordered', 'paid'],
+		labels: [gettext('Placed orders'), gettext('Paid orders')],
+		lineColors: ['#3b1c4a', '#50a167'],
+		smooth: false,
+		resize: true,
+		fillOpacity: 0.3,
+		behaveLikeLine: true
+	})
+	new Morris.Area({
+		element: 'abd_chart',
+		data: JSON.parse($('#abd-data').html()),
+		xkey: 'date',
+		ykeys: ['ordered', 'paid'],
+		labels: [gettext('Attendees (ordered)'), gettext('Attendees (paid)')],
+		lineColors: ['#3b1c4a', '#50a167'],
+		smooth: false,
+		resize: true,
+		fillOpacity: 0.3,
+		behaveLikeLine: true
+	})
+	new Morris.Area({
+		element: 'abt_chart',
+		data: JSON.parse($('#abt-data').html()),
+		xkey: 'date',
+		ykeys: ['ordered', 'paid'],
+		labels: [gettext('Attendees (ordered)'), gettext('Attendees (paid)')],
+		lineColors: ['#3b1c4a', '#50a167'],
+		smooth: false,
+		resize: true,
+		fillOpacity: 0.3,
+		behaveLikeLine: true
+	})
+	new Morris.Area({
+		element: 'rev_chart',
+		data: JSON.parse($('#rev-data').html()),
+		xkey: 'date',
+		ykeys: ['revenue'],
+		labels: [gettext('Total revenue')],
+		smooth: false,
+		resize: true,
+		lineColors: ['#3b1c4a'],
+		fillOpacity: 0.3,
+		preUnits: $.trim($('#currency').html()) + ' '
+	})
+	new Morris.Bar({
+		element: 'obp_chart',
+		data: JSON.parse($('#obp-data').html()),
+		xkey: 'item_short',
+		ykeys: ['ordered', 'paid'],
+		labels: [gettext('Placed orders'), gettext('Paid orders')],
+		barColors: ['#3b1c4a', '#50a167'],
+		hoverCallback: function (index, options, content, row) {
+			console.log(content)
+			let $c = $('<div>' + content + '</div>')
+			let $label = $c.find('.morris-hover-row-label')
+			$label.text(row.item)
+			let newc = $label.get(0).outerHTML
+			$c.find('.morris-hover-point').each(function (i, r) {
+				if ($.trim($(r).text().split('\n')[2]) !== '0') {
+					newc += r.outerHTML
+				}
+			})
+			return newc
+		},
+		resize: true,
+		xLabelAngle: 30
+	})
+})

src/pretix/plugins/stripe/static/pretixplugins/stripe/pretix-stripe.js

@@ -1,435 +1,435 @@
-/*global $, stripe_pubkey, stripe_loadingmessage, gettext */
-'use strict';
+/* global stripe_pubkey, stripe_loadingmessage, gettext */
+'use strict'
 
 var pretixstripe = {
-    stripe: null,
-    elements: null,
-    card: null,
-    sepa: null,
-    affirm: null,
-    klarna: null,
-    paymentRequest: null,
-    paymentRequestButton: null,
+	stripe: null,
+	elements: null,
+	card: null,
+	sepa: null,
+	affirm: null,
+	klarna: null,
+	paymentRequest: null,
+	paymentRequestButton: null,
 
-    'pm_request': function (method, element, kwargs = {}) {
-        waitingDialog.show(gettext("Contacting Stripe …"));
-        $(".stripe-errors").hide();
+	pm_request: function (method, element, kwargs = {}) {
+		waitingDialog.show(gettext('Contacting Stripe …'))
+		$('.stripe-errors').hide()
 
-        pretixstripe.stripe.createPaymentMethod(method, element, kwargs).then(function (result) {
-            waitingDialog.hide();
-            if (result.error) {
-                $(".stripe-errors").stop().hide().removeClass("sr-only");
-                $(".stripe-errors").html("<div class='alert alert-danger'>" + result.error.message + "</div>");
-                $(".stripe-errors").slideDown();
-            } else {
-                var $form = $("#stripe_" + method + "_payment_method_id").closest("form");
-                // Insert the token into the form so it gets submitted to the server
-                $("#stripe_" + method + "_payment_method_id").val(result.paymentMethod.id);
-                if (method === 'card') {
-                    $("#stripe_card_brand").val(result.paymentMethod.card.brand);
-                    $("#stripe_card_last4").val(result.paymentMethod.card.last4);
-                }
-                if (method === 'sepa_debit') {
-                    $("#stripe_sepa_debit_last4").val(result.paymentMethod.sepa_debit.last4);
-                }
-                // and submit
-                $form.get(0).submit();
-            }
-        }).catch((e) => {
-            waitingDialog.hide();
-            $(".stripe-errors").stop().hide().removeClass("sr-only");
-            $(".stripe-errors").html("<div class='alert alert-danger'>Technical error, please contact support: " + e + "</div>");
-            $(".stripe-errors").slideDown();
-        });
-    },
-    'load': function () {
-        if (pretixstripe.stripe !== null) {
-            return;
-        }
-        $('.stripe-container').closest("form").find(".checkout-button-row .btn-primary").prop("disabled", true);
-        $.ajax(
-            {
-                url: 'https://js.stripe.com/v3/',
-                dataType: 'script',
-                success: function () {
-                    if ($.trim($("#stripe_connectedAccountId").html())) {
-                        pretixstripe.stripe = Stripe($.trim($("#stripe_pubkey").html()), {
-                            stripeAccount: $.trim($("#stripe_connectedAccountId").html()),
-                            locale: $.trim($("body").attr("data-locale"))
-                        });
-                    } else {
-                        pretixstripe.stripe = Stripe($.trim($("#stripe_pubkey").html()), {
-                            locale: $.trim($("body").attr("data-locale"))
-                        });
-                    }
-                    pretixstripe.elements = pretixstripe.stripe.elements();
-                    if ($.trim($("#stripe_merchantcountry").html()) !== "") {
-                        try {
-                            pretixstripe.paymentRequest = pretixstripe.stripe.paymentRequest({
-                                country: $("#stripe_merchantcountry").html(),
-                                currency: $("#stripe_card_currency").val().toLowerCase(),
-                                total: {
-                                    label: gettext('Total'),
-                                    amount: parseInt($("#stripe_card_total").val())
-                                },
-                                displayItems: [],
-                                requestPayerName: false,
-                                requestPayerEmail: false,
-                                requestPayerPhone: false,
-                                requestShipping: false,
-                            });
+		pretixstripe.stripe.createPaymentMethod(method, element, kwargs).then(function (result) {
+			waitingDialog.hide()
+			if (result.error) {
+				$('.stripe-errors').stop().hide().removeClass('sr-only')
+				$('.stripe-errors').html('<div class=\'alert alert-danger\'>' + result.error.message + '</div>')
+				$('.stripe-errors').slideDown()
+			} else {
+				let $form = $('#stripe_' + method + '_payment_method_id').closest('form')
+				// Insert the token into the form so it gets submitted to the server
+				$('#stripe_' + method + '_payment_method_id').val(result.paymentMethod.id)
+				if (method === 'card') {
+					$('#stripe_card_brand').val(result.paymentMethod.card.brand)
+					$('#stripe_card_last4').val(result.paymentMethod.card.last4)
+				}
+				if (method === 'sepa_debit') {
+					$('#stripe_sepa_debit_last4').val(result.paymentMethod.sepa_debit.last4)
+				}
+				// and submit
+				$form.get(0).submit()
+			}
+		}).catch((e) => {
+			waitingDialog.hide()
+			$('.stripe-errors').stop().hide().removeClass('sr-only')
+			$('.stripe-errors').html('<div class=\'alert alert-danger\'>Technical error, please contact support: ' + e + '</div>')
+			$('.stripe-errors').slideDown()
+		})
+	},
+	load: function () {
+		if (pretixstripe.stripe !== null) {
+			return
+		}
+		$('.stripe-container').closest('form').find('.checkout-button-row .btn-primary').prop('disabled', true)
+		$.ajax(
+			{
+				url: 'https://js.stripe.com/v3/',
+				dataType: 'script',
+				success: function () {
+					if ($.trim($('#stripe_connectedAccountId').html())) {
+						pretixstripe.stripe = Stripe($.trim($('#stripe_pubkey').html()), {
+							stripeAccount: $.trim($('#stripe_connectedAccountId').html()),
+							locale: $.trim($('body').attr('data-locale'))
+						})
+					} else {
+						pretixstripe.stripe = Stripe($.trim($('#stripe_pubkey').html()), {
+							locale: $.trim($('body').attr('data-locale'))
+						})
+					}
+					pretixstripe.elements = pretixstripe.stripe.elements()
+					if ($.trim($('#stripe_merchantcountry').html()) !== '') {
+						try {
+							pretixstripe.paymentRequest = pretixstripe.stripe.paymentRequest({
+								country: $('#stripe_merchantcountry').html(),
+								currency: $('#stripe_card_currency').val().toLowerCase(),
+								total: {
+									label: gettext('Total'),
+									amount: parseInt($('#stripe_card_total').val())
+								},
+								displayItems: [],
+								requestPayerName: false,
+								requestPayerEmail: false,
+								requestPayerPhone: false,
+								requestShipping: false,
+							})
 
-                            pretixstripe.paymentRequest.on('paymentmethod', function (ev) {
-                                ev.complete('success');
+							pretixstripe.paymentRequest.on('paymentmethod', function (ev) {
+								ev.complete('success')
 
-                                var $form = $("#stripe_card_payment_method_id").closest("form");
-                                // Insert the token into the form so it gets submitted to the server
-                                $("#stripe_card_payment_method_id").val(ev.paymentMethod.id);
-                                $("#stripe_card_brand").val(ev.paymentMethod.card.brand);
-                                $("#stripe_card_last4").val(ev.paymentMethod.card.last4);
-                                // and submit
-                                $form.get(0).submit();
-                            });
-                        } catch (e) {
-                            pretixstripe.paymentRequest = null;
-                        }
-                    } else {
-                        pretixstripe.paymentRequest = null;
-                    }
-                    if ($("#stripe-card").length) {
-                        pretixstripe.card = pretixstripe.elements.create('card', {
-                            'style': {
-                                'base': {
-                                    'fontFamily': '"Open Sans","OpenSans","Helvetica Neue",Helvetica,Arial,sans-serif',
-                                    'fontSize': '14px',
-                                    'color': '#555555',
-                                    'lineHeight': '1.42857',
-                                    'border': '1px solid #ccc',
-                                    '::placeholder': {
-                                        color: 'rgba(0,0,0,0.4)',
-                                    },
-                                },
-                                'invalid': {
-                                    'color': 'red',
-                                },
-                            },
-                            classes: {
-                                focus: 'is-focused',
-                                invalid: 'has-error',
-                            }
-                        });
-                        pretixstripe.card.mount("#stripe-card");
-                        pretixstripe.card.on('ready', function () {
-                            $('.stripe-container').closest("form").find(".checkout-button-row .btn-primary").prop("disabled", false);
-                        });
-                    }
-                    if ($("#stripe-sepa").length) {
-                        pretixstripe.sepa = pretixstripe.elements.create('iban', {
-                            'style': {
-                                'base': {
-                                    'fontFamily': '"Open Sans","OpenSans","Helvetica Neue",Helvetica,Arial,sans-serif',
-                                    'fontSize': '14px',
-                                    'color': '#555555',
-                                    'lineHeight': '1.42857',
-                                    'border': '1px solid #ccc',
-                                    '::placeholder': {
-                                        color: 'rgba(0,0,0,0.4)',
-                                    },
-                                },
-                                'invalid': {
-                                    'color': 'red',
-                                },
-                            },
-                            supportedCountries: ['SEPA'],
-                            classes: {
-                                focus: 'is-focused',
-                                invalid: 'has-error',
-                            }
-                        });
-                        pretixstripe.sepa.on('change', function (event) {
-                            // List of IBAN-countries, that require the country as well as line1-property according to
-                            // https://stripe.com/docs/payments/sepa-debit/accept-a-payment?platform=web&ui=element#web-submit-payment
-                            if (['AD', 'PF', 'TF', 'GI', 'GB', 'GG', 'VA', 'IM', 'JE', 'MC', 'NC', 'BL', 'PM', 'SM', 'CH', 'WF'].indexOf(event.country) > 0) {
-                                $("#stripe_sepa_debit_country").prop('checked', true);
-                                $("#stripe_sepa_debit_country").change();
-                            } else {
-                                $("#stripe_sepa_debit_country").prop('checked', false);
-                                $("#stripe_sepa_debit_country").change();
-                            }
-                            if (event.bankName) {
-                                $("#stripe_sepa_debit_bank").val(event.bankName);
-                            }
-                        });
-                        pretixstripe.sepa.mount("#stripe-sepa");
-                        pretixstripe.sepa.on('ready', function () {
-                            $('.stripe-container').closest("form").find(".checkout-button-row .btn-primary").prop("disabled", false);
-                        });
-                    }
-                    if ($("#stripe-affirm").length) {
-                        pretixstripe.affirm = pretixstripe.elements.create('affirmMessage', {
-                            'amount': parseInt($("#stripe_affirm_total").val()),
-                            'currency': $("#stripe_affirm_currency").val(),
-                        });
+								let $form = $('#stripe_card_payment_method_id').closest('form')
+								// Insert the token into the form so it gets submitted to the server
+								$('#stripe_card_payment_method_id').val(ev.paymentMethod.id)
+								$('#stripe_card_brand').val(ev.paymentMethod.card.brand)
+								$('#stripe_card_last4').val(ev.paymentMethod.card.last4)
+								// and submit
+								$form.get(0).submit()
+							})
+						} catch (e) {
+							pretixstripe.paymentRequest = null
+						}
+					} else {
+						pretixstripe.paymentRequest = null
+					}
+					if ($('#stripe-card').length) {
+						pretixstripe.card = pretixstripe.elements.create('card', {
+							style: {
+								base: {
+									fontFamily: '"Open Sans","OpenSans","Helvetica Neue",Helvetica,Arial,sans-serif',
+									fontSize: '14px',
+									color: '#555555',
+									lineHeight: '1.42857',
+									border: '1px solid #ccc',
+									'::placeholder': {
+										color: 'rgba(0,0,0,0.4)',
+									},
+								},
+								invalid: {
+									color: 'red',
+								},
+							},
+							classes: {
+								focus: 'is-focused',
+								invalid: 'has-error',
+							}
+						})
+						pretixstripe.card.mount('#stripe-card')
+						pretixstripe.card.on('ready', function () {
+							$('.stripe-container').closest('form').find('.checkout-button-row .btn-primary').prop('disabled', false)
+						})
+					}
+					if ($('#stripe-sepa').length) {
+						pretixstripe.sepa = pretixstripe.elements.create('iban', {
+							style: {
+								base: {
+									fontFamily: '"Open Sans","OpenSans","Helvetica Neue",Helvetica,Arial,sans-serif',
+									fontSize: '14px',
+									color: '#555555',
+									lineHeight: '1.42857',
+									border: '1px solid #ccc',
+									'::placeholder': {
+										color: 'rgba(0,0,0,0.4)',
+									},
+								},
+								invalid: {
+									color: 'red',
+								},
+							},
+							supportedCountries: ['SEPA'],
+							classes: {
+								focus: 'is-focused',
+								invalid: 'has-error',
+							}
+						})
+						pretixstripe.sepa.on('change', function (event) {
+							// List of IBAN-countries, that require the country as well as line1-property according to
+							// https://stripe.com/docs/payments/sepa-debit/accept-a-payment?platform=web&ui=element#web-submit-payment
+							if (['AD', 'PF', 'TF', 'GI', 'GB', 'GG', 'VA', 'IM', 'JE', 'MC', 'NC', 'BL', 'PM', 'SM', 'CH', 'WF'].indexOf(event.country) > 0) {
+								$('#stripe_sepa_debit_country').prop('checked', true)
+								$('#stripe_sepa_debit_country').change()
+							} else {
+								$('#stripe_sepa_debit_country').prop('checked', false)
+								$('#stripe_sepa_debit_country').change()
+							}
+							if (event.bankName) {
+								$('#stripe_sepa_debit_bank').val(event.bankName)
+							}
+						})
+						pretixstripe.sepa.mount('#stripe-sepa')
+						pretixstripe.sepa.on('ready', function () {
+							$('.stripe-container').closest('form').find('.checkout-button-row .btn-primary').prop('disabled', false)
+						})
+					}
+					if ($('#stripe-affirm').length) {
+						pretixstripe.affirm = pretixstripe.elements.create('affirmMessage', {
+							amount: parseInt($('#stripe_affirm_total').val()),
+							currency: $('#stripe_affirm_currency').val(),
+						})
 
-                        pretixstripe.affirm.mount('#stripe-affirm');
-                    }
-                    if ($("#stripe-klarna").length) {
-                        try {
-                            pretixstripe.klarna = pretixstripe.elements.create('paymentMethodMessaging', {
-                                'amount': parseInt($("#stripe_klarna_total").val()),
-                                'currency': $("#stripe_klarna_currency").val(),
-                                'countryCode': $("#stripe_klarna_country").val(),
-                                'paymentMethodTypes': ['klarna'],
-                            });
+						pretixstripe.affirm.mount('#stripe-affirm')
+					}
+					if ($('#stripe-klarna').length) {
+						try {
+							pretixstripe.klarna = pretixstripe.elements.create('paymentMethodMessaging', {
+								amount: parseInt($('#stripe_klarna_total').val()),
+								currency: $('#stripe_klarna_currency').val(),
+								countryCode: $('#stripe_klarna_country').val(),
+								paymentMethodTypes: ['klarna'],
+							})
 
-                            pretixstripe.klarna.mount('#stripe-klarna');
-                        } catch (e) {
-                            console.error(e);
-                            $("#stripe-klarna").html("<div class='alert alert-danger'>Technical error, please contact support: " + e + "</div>");
-                        }
-                    }
-                    if ($("#stripe-payment-request-button").length && pretixstripe.paymentRequest != null) {
-                        pretixstripe.paymentRequestButton = pretixstripe.elements.create('paymentRequestButton', {
-                            paymentRequest: pretixstripe.paymentRequest,
-                        });
+							pretixstripe.klarna.mount('#stripe-klarna')
+						} catch (e) {
+							console.error(e)
+							$('#stripe-klarna').html('<div class=\'alert alert-danger\'>Technical error, please contact support: ' + e + '</div>')
+						}
+					}
+					if ($('#stripe-payment-request-button').length && pretixstripe.paymentRequest != null) {
+						pretixstripe.paymentRequestButton = pretixstripe.elements.create('paymentRequestButton', {
+							paymentRequest: pretixstripe.paymentRequest,
+						})
 
-                        pretixstripe.paymentRequest.canMakePayment().then(function (result) {
-                            if (result) {
-                                pretixstripe.paymentRequestButton.mount('#stripe-payment-request-button');
-                                $('#stripe-card-elements .stripe-or').removeClass("hidden");
-                                $('#stripe-payment-request-button').parent().removeClass("hidden");
-                            } else {
-                                $('#stripe-payment-request-button').hide();
-                                document.getElementById('stripe-payment-request-button').style.display = 'none';
-                            }
-                        });
-                    }
-                }
-            }
-        );
-    },
-    'withStripe': function (callback) {
-        $.ajax({
-            url: 'https://js.stripe.com/v3/',
-            dataType: 'script',
-            success: function () {
-                if ($.trim($("#stripe_connectedAccountId").html())) {
-                    pretixstripe.stripe = Stripe($.trim($("#stripe_pubkey").html()), {
-                        stripeAccount: $.trim($("#stripe_connectedAccountId").html()),
-                        locale: $.trim($("body").attr("data-locale"))
-                    });
-                } else {
-                    pretixstripe.stripe = Stripe($.trim($("#stripe_pubkey").html()), {
-                        locale: $.trim($("body").attr("data-locale"))
-                    });
-                }
-                callback();
-            }
-        });
-    },
-    'handleAlipayAction': function (payment_intent_client_secret) {
-        pretixstripe.withStripe(function () {
-            pretixstripe.stripe.confirmAlipayPayment(
-                payment_intent_client_secret,
-                {
-                    return_url: window.location.href
-                }
-            ).then(function (result) {
-                if (result.error) {
-                    waitingDialog.hide();
-                    $(".stripe-errors").stop().hide().removeClass("sr-only");
-                    $(".stripe-errors").html("<div class='alert alert-danger'>Technical error, please contact support: " + result.error.message + "</div>");
-                    $(".stripe-errors").slideDown();
-                } else {
-                    waitingDialog.show(gettext("Confirming your payment …"));
-                }
-            });
-        });
-    },
-    'handleWechatAction': function (payment_intent_client_secret) {
-        pretixstripe.withStripe(function () {
-            pretixstripe.stripe.confirmWechatPayPayment(
-                payment_intent_client_secret,
-                {
-                    payment_method_options: {
-                        wechat_pay: {
-                            client: 'web',
-                        },
-                    },
-                }
-            ).then(function (result) {
-                if (result.error) {
-                    waitingDialog.hide();
-                    $(".stripe-errors").stop().hide().removeClass("sr-only");
-                    $(".stripe-errors").html("<div class='alert alert-danger'>Technical error, please contact support: " + result.error.message + "</div>");
-                    $(".stripe-errors").slideDown();
-                } else {
-                    waitingDialog.show(gettext("Confirming your payment …"));
-                    location.reload();
-                }
-            });
-        });
-    },
-    'handleCardAction': function (payment_intent_client_secret) {
-        pretixstripe.withStripe(function () {
-            pretixstripe.stripe.handleCardAction(
-                payment_intent_client_secret
-            ).then(function (result) {
-                if (result.error) {
-                    waitingDialog.hide();
-                    $(".stripe-errors").stop().hide().removeClass("sr-only");
-                    $(".stripe-errors").html("<div class='alert alert-danger'>Technical error, please contact support: " + result.error.message + "</div>");
-                    $(".stripe-errors").slideDown();
-                } else {
-                    waitingDialog.show(gettext("Confirming your payment …"));
-                    location.reload();
-                }
-            });
-        });
-    },
-    'handlePaymentRedirectAction': function (payment_intent_next_action_redirect_url) {
-        waitingDialog.show(gettext("Contacting your bank …"));
+						pretixstripe.paymentRequest.canMakePayment().then(function (result) {
+							if (result) {
+								pretixstripe.paymentRequestButton.mount('#stripe-payment-request-button')
+								$('#stripe-card-elements .stripe-or').removeClass('hidden')
+								$('#stripe-payment-request-button').parent().removeClass('hidden')
+							} else {
+								$('#stripe-payment-request-button').hide()
+								document.getElementById('stripe-payment-request-button').style.display = 'none'
+							}
+						})
+					}
+				}
+			}
+		)
+	},
+	withStripe: function (callback) {
+		$.ajax({
+			url: 'https://js.stripe.com/v3/',
+			dataType: 'script',
+			success: function () {
+				if ($.trim($('#stripe_connectedAccountId').html())) {
+					pretixstripe.stripe = Stripe($.trim($('#stripe_pubkey').html()), {
+						stripeAccount: $.trim($('#stripe_connectedAccountId').html()),
+						locale: $.trim($('body').attr('data-locale'))
+					})
+				} else {
+					pretixstripe.stripe = Stripe($.trim($('#stripe_pubkey').html()), {
+						locale: $.trim($('body').attr('data-locale'))
+					})
+				}
+				callback()
+			}
+		})
+	},
+	handleAlipayAction: function (payment_intent_client_secret) {
+		pretixstripe.withStripe(function () {
+			pretixstripe.stripe.confirmAlipayPayment(
+				payment_intent_client_secret,
+				{
+					return_url: window.location.href
+				}
+			).then(function (result) {
+				if (result.error) {
+					waitingDialog.hide()
+					$('.stripe-errors').stop().hide().removeClass('sr-only')
+					$('.stripe-errors').html('<div class=\'alert alert-danger\'>Technical error, please contact support: ' + result.error.message + '</div>')
+					$('.stripe-errors').slideDown()
+				} else {
+					waitingDialog.show(gettext('Confirming your payment …'))
+				}
+			})
+		})
+	},
+	handleWechatAction: function (payment_intent_client_secret) {
+		pretixstripe.withStripe(function () {
+			pretixstripe.stripe.confirmWechatPayPayment(
+				payment_intent_client_secret,
+				{
+					payment_method_options: {
+						wechat_pay: {
+							client: 'web',
+						},
+					},
+				}
+			).then(function (result) {
+				if (result.error) {
+					waitingDialog.hide()
+					$('.stripe-errors').stop().hide().removeClass('sr-only')
+					$('.stripe-errors').html('<div class=\'alert alert-danger\'>Technical error, please contact support: ' + result.error.message + '</div>')
+					$('.stripe-errors').slideDown()
+				} else {
+					waitingDialog.show(gettext('Confirming your payment …'))
+					location.reload()
+				}
+			})
+		})
+	},
+	handleCardAction: function (payment_intent_client_secret) {
+		pretixstripe.withStripe(function () {
+			pretixstripe.stripe.handleCardAction(
+				payment_intent_client_secret
+			).then(function (result) {
+				if (result.error) {
+					waitingDialog.hide()
+					$('.stripe-errors').stop().hide().removeClass('sr-only')
+					$('.stripe-errors').html('<div class=\'alert alert-danger\'>Technical error, please contact support: ' + result.error.message + '</div>')
+					$('.stripe-errors').slideDown()
+				} else {
+					waitingDialog.show(gettext('Confirming your payment …'))
+					location.reload()
+				}
+			})
+		})
+	},
+	handlePaymentRedirectAction: function (payment_intent_next_action_redirect_url) {
+		waitingDialog.show(gettext('Contacting your bank …'))
 
-        let payment_intent_redirect_action_handling = $.trim($("#stripe_payment_intent_redirect_action_handling").html());
-        if (payment_intent_redirect_action_handling === 'iframe') {
-            let iframe = document.createElement('iframe');
-            iframe.src = payment_intent_next_action_redirect_url;
-            iframe.className = 'embed-responsive-item';
-            $('#scacontainer').append(iframe);
-            $('#scacontainer iframe').on("load", function () {
-                waitingDialog.hide();
-            });
-        } else if (payment_intent_redirect_action_handling === 'redirect') {
-            window.location.href = payment_intent_next_action_redirect_url;
-        }
-    }
-};
+		let payment_intent_redirect_action_handling = $.trim($('#stripe_payment_intent_redirect_action_handling').html())
+		if (payment_intent_redirect_action_handling === 'iframe') {
+			let iframe = document.createElement('iframe')
+			iframe.src = payment_intent_next_action_redirect_url
+			iframe.className = 'embed-responsive-item'
+			$('#scacontainer').append(iframe)
+			$('#scacontainer iframe').on('load', function () {
+				waitingDialog.hide()
+			})
+		} else if (payment_intent_redirect_action_handling === 'redirect') {
+			window.location.href = payment_intent_next_action_redirect_url
+		}
+	}
+}
 $(function () {
-    if ($("#stripe_payment_intent_SCA_status").length) {
-        let payment_intent_redirect_action_handling = $.trim($("#stripe_payment_intent_redirect_action_handling").html());
-        let order_status = $.trim($("#order_status").html());
-        let order_url = $.trim($("#order_url").html())
+	if ($('#stripe_payment_intent_SCA_status').length) {
+		let payment_intent_redirect_action_handling = $.trim($('#stripe_payment_intent_redirect_action_handling').html())
+		let order_status = $.trim($('#order_status').html())
+		let order_url = $.trim($('#order_url').html())
 
-        if (payment_intent_redirect_action_handling === 'iframe') {
-            window.parent.postMessage('3DS-authentication-complete.' + order_status, '*');
-            return;
-        } else if (payment_intent_redirect_action_handling === 'redirect') {
-            waitingDialog.show(gettext("Confirming your payment …"));
+		if (payment_intent_redirect_action_handling === 'iframe') {
+			window.parent.postMessage('3DS-authentication-complete.' + order_status, '*')
+			return
+		} else if (payment_intent_redirect_action_handling === 'redirect') {
+			waitingDialog.show(gettext('Confirming your payment …'))
 
-            if (order_status === 'p') {
-                window.location.href = order_url + '?paid=yes';
-            } else {
-                window.location.href = order_url;
-            }
-        }
-    } else if ($("#stripe_payment_intent_next_action_redirect_url").length) {
-        let payment_intent_next_action_redirect_url = JSON.parse($("#stripe_payment_intent_next_action_redirect_url").html());
-        pretixstripe.handlePaymentRedirectAction(payment_intent_next_action_redirect_url);
-    } else if ($.trim($("#stripe_payment_intent_action_type").html()) === "promptpay_display_qr_code") {
-        waitingDialog.hide();
-    } else if ($.trim($("#stripe_payment_intent_action_type").html()) === "wechat_pay_display_qr_code") {
-        let payment_intent_client_secret = $.trim($("#stripe_payment_intent_client_secret").html());
-        pretixstripe.handleWechatAction(payment_intent_client_secret);
-    } else if ($.trim($("#stripe_payment_intent_action_type").html()) === "alipay_handle_redirect") {
-        let payment_intent_client_secret = $.trim($("#stripe_payment_intent_client_secret").html());
-        pretixstripe.handleAlipayAction(payment_intent_client_secret);
-    } else if ($("#stripe_payment_intent_client_secret").length) {
-        let payment_intent_client_secret = $.trim($("#stripe_payment_intent_client_secret").html());
-        pretixstripe.handleCardAction(payment_intent_client_secret);
-    }
+			if (order_status === 'p') {
+				window.location.href = order_url + '?paid=yes'
+			} else {
+				window.location.href = order_url
+			}
+		}
+	} else if ($('#stripe_payment_intent_next_action_redirect_url').length) {
+		let payment_intent_next_action_redirect_url = JSON.parse($('#stripe_payment_intent_next_action_redirect_url').html())
+		pretixstripe.handlePaymentRedirectAction(payment_intent_next_action_redirect_url)
+	} else if ($.trim($('#stripe_payment_intent_action_type').html()) === 'promptpay_display_qr_code') {
+		waitingDialog.hide()
+	} else if ($.trim($('#stripe_payment_intent_action_type').html()) === 'wechat_pay_display_qr_code') {
+		let payment_intent_client_secret = $.trim($('#stripe_payment_intent_client_secret').html())
+		pretixstripe.handleWechatAction(payment_intent_client_secret)
+	} else if ($.trim($('#stripe_payment_intent_action_type').html()) === 'alipay_handle_redirect') {
+		let payment_intent_client_secret = $.trim($('#stripe_payment_intent_client_secret').html())
+		pretixstripe.handleAlipayAction(payment_intent_client_secret)
+	} else if ($('#stripe_payment_intent_client_secret').length) {
+		let payment_intent_client_secret = $.trim($('#stripe_payment_intent_client_secret').html())
+		pretixstripe.handleCardAction(payment_intent_client_secret)
+	}
 
-    $(window).on("message onmessage", function (e) {
-        if (typeof e.originalEvent.data === "string" && e.originalEvent.data.startsWith('3DS-authentication-complete.')) {
-            waitingDialog.show(gettext("Confirming your payment …"));
-            $('#scacontainer').hide();
-            $('#continuebutton').removeClass('hidden');
+	$(window).on('message onmessage', function (e) {
+		if (typeof e.originalEvent.data === 'string' && e.originalEvent.data.startsWith('3DS-authentication-complete.')) {
+			waitingDialog.show(gettext('Confirming your payment …'))
+			$('#scacontainer').hide()
+			$('#continuebutton').removeClass('hidden')
 
-            if (e.originalEvent.data.split('.')[1] == 'p') {
-                window.location.href = $('#continuebutton').attr('href') + '?paid=yes';
-            } else {
-                window.location.href = $('#continuebutton').attr('href');
-            }
-        }
-    });
+			if (e.originalEvent.data.split('.')[1] == 'p') {
+				window.location.href = $('#continuebutton').attr('href') + '?paid=yes'
+			} else {
+				window.location.href = $('#continuebutton').attr('href')
+			}
+		}
+	})
 
-    if (!$(".stripe-container").length)
-        return;
+	if (!$('.stripe-container').length)
+		return
 
-    if (
-        $("input[name=payment][value=stripe]").is(':checked')
-        || $("input[name=payment][value=stripe_sepa_debit]").is(':checked')
-        || $("input[name=payment][value=stripe_affirm]").is(':checked')
-        || $("input[name=payment][value=stripe_klarna]").is(':checked')
-        || $(".payment-redo-form").length) {
-        pretixstripe.load();
-    } else {
-        $("input[name=payment]").change(function () {
-            if (['stripe', 'stripe_sepa_debit', 'stripe_affirm', 'stripe_klarna'].indexOf($(this).val()) > -1) {
-                pretixstripe.load();
-            }
-        })
-    }
+	if (
+		$('input[name=payment][value=stripe]').is(':checked')
+		|| $('input[name=payment][value=stripe_sepa_debit]').is(':checked')
+		|| $('input[name=payment][value=stripe_affirm]').is(':checked')
+		|| $('input[name=payment][value=stripe_klarna]').is(':checked')
+		|| $('.payment-redo-form').length) {
+		pretixstripe.load()
+	} else {
+		$('input[name=payment]').change(function () {
+			if (['stripe', 'stripe_sepa_debit', 'stripe_affirm', 'stripe_klarna'].indexOf($(this).val()) > -1) {
+				pretixstripe.load()
+			}
+		})
+	}
 
-    $("#stripe_other_card").click(
-        function (e) {
-            $("#stripe_card_payment_method_id").val("");
-            $("#stripe-current-card").slideUp();
-            $("#stripe-card-elements").slideDown();
+	$('#stripe_other_card').click(
+		function (e) {
+			$('#stripe_card_payment_method_id').val('')
+			$('#stripe-current-card').slideUp()
+			$('#stripe-card-elements').slideDown()
 
-            e.preventDefault();
-            return false;
-        }
-    );
+			e.preventDefault()
+			return false
+		}
+	)
 
-    if ($("#stripe-current-card").length) {
-        $("#stripe-card-elements").hide();
-    }
+	if ($('#stripe-current-card').length) {
+		$('#stripe-card-elements').hide()
+	}
 
-    $("#stripe_other_account").click(
-        function (e) {
-            $("#stripe_sepa_debit_payment_method_id").val("");
-            $("#stripe-current-account").slideUp();
-            // We're using a css-selector here instead of the id-selector,
-            // as we're hiding Stripe Elements *and* Django form fields
-            $('.stripe-sepa_debit-form').slideDown();
+	$('#stripe_other_account').click(
+		function (e) {
+			$('#stripe_sepa_debit_payment_method_id').val('')
+			$('#stripe-current-account').slideUp()
+			// We're using a css-selector here instead of the id-selector,
+			// as we're hiding Stripe Elements *and* Django form fields
+			$('.stripe-sepa_debit-form').slideDown()
 
-            e.preventDefault();
-            return false;
-        }
-    );
+			e.preventDefault()
+			return false
+		}
+	)
 
-    if ($("#stripe-current-account").length) {
-        // We're using a css-selector here instead of the id-selector,
-        // as we're hiding Stripe Elements *and* Django form fields
-        $('.stripe-sepa_debit-form').hide();
-    }
+	if ($('#stripe-current-account').length) {
+		// We're using a css-selector here instead of the id-selector,
+		// as we're hiding Stripe Elements *and* Django form fields
+		$('.stripe-sepa_debit-form').hide()
+	}
 
-    $('.stripe-container').closest("form").submit(
-        function () {
-            if ($("input[name=card_new]").length && !$("input[name=card_new]").prop('checked')) {
-                return null;
-            }
-            if (($("input[name=payment][value=stripe]").prop('checked') || $("input[name=payment][type=radio]").length === 0)
-                && $("#stripe_card_payment_method_id").val() == "") {
-                pretixstripe.pm_request('card', pretixstripe.card);
-                return false;
-            }
+	$('.stripe-container').closest('form').submit(
+		function () {
+			if ($('input[name=card_new]').length && !$('input[name=card_new]').prop('checked')) {
+				return null
+			}
+			if (($('input[name=payment][value=stripe]').prop('checked') || $('input[name=payment][type=radio]').length === 0)
+				&& $('#stripe_card_payment_method_id').val() == '') {
+				pretixstripe.pm_request('card', pretixstripe.card)
+				return false
+			}
 
-            if (($("input[name=payment][value=stripe_sepa_debit]").prop('checked')) && $("#stripe_sepa_debit_payment_method_id").val() == "") {
-                pretixstripe.pm_request('sepa_debit', pretixstripe.sepa, {
-                    billing_details: {
-                        name: $("#id_payment_stripe_sepa_debit-accountname").val(),
-                        email: $("#stripe_sepa_debit_email").val(),
-                        address: {
-                            line1: $("#id_payment_stripe_sepa_debit-line1").val(),
-                            postal_code: $("#id_payment_stripe_sepa_debit-postal_code").val(),
-                            city: $("#id_payment_stripe_sepa_debit-city").val(),
-                            country: $("#id_payment_stripe_sepa_debit-country").val(),
-                        }
-                    }
-                });
-                return false;
-            }
-        }
-    );
-});
+			if (($('input[name=payment][value=stripe_sepa_debit]').prop('checked')) && $('#stripe_sepa_debit_payment_method_id').val() == '') {
+				pretixstripe.pm_request('sepa_debit', pretixstripe.sepa, {
+					billing_details: {
+						name: $('#id_payment_stripe_sepa_debit-accountname').val(),
+						email: $('#stripe_sepa_debit_email').val(),
+						address: {
+							line1: $('#id_payment_stripe_sepa_debit-line1').val(),
+							postal_code: $('#id_payment_stripe_sepa_debit-postal_code').val(),
+							city: $('#id_payment_stripe_sepa_debit-city').val(),
+							country: $('#id_payment_stripe_sepa_debit-country').val(),
+						}
+					}
+				})
+				return false
+			}
+		}
+	)
+})

src/pretix/presale/checkoutflow.py

@@ -873,6 +873,28 @@ class QuestionsStep(CartQuestionsViewMixin, CartMixin, TemplateFlowStep):
                 'attendee_name_parts': d
             })
 
+        wd = self.cart_session.get('widget_data', {})
+        if wd.get('attendee-fix', '') == 'true':
+            for k, v in wd.items():
+                if v and k.startswith('attendee-name'):
+                    o.append({
+                        'attendee_name_parts': {
+                            'disabled': True,
+                        }
+                    })
+                elif v and k.startswith('email'):
+                    o.append({
+                        'attendee_email': {
+                            'disabled': True,
+                        }
+                    })
+                elif v and k.startswith('question-'):
+                    o.append({
+                        k[9:].upper(): {
+                            'disabled': True,
+                        }
+                    })
+
         return o
 
     @cached_property

src/pretix/presale/templates/pretixpresale/event/index.html

@@ -23,7 +23,11 @@
             {% endblocktrans %} ::
         {% endif %}
     {% elif subevent %}
-        {{ subevent.get_date_range_display }} ::
+        {% if subevent.name|upper != event.name|upper %}
+            {# The |upper is a trick to force LazyI18nString→str conversion before comparison #}
+            {{ subevent.name }} ::
+        {% endif %}
+        {{ subevent.get_date_range_display_with_times }} ::
     {% endif %}
 {% endblock %}
 

src/pretix/presale/templates/pretixpresale/event/payment_qr_codes.html

@@ -3,7 +3,7 @@
 {% load escapejson %}
 
 {% if payment_qr_codes %}
-    <div class="tabcontainer col-md-6 col-sm-6 hidden-xs text-center js-only blank-after">
+    <div class="tabcontainer col-md-6 col-sm-6 col-xs-12 text-center js-only blank-after">
         <div id="banktransfer_qrcodes_tabs_content" class="tabpanels blank-after">
             {% for code_info in payment_qr_codes %}
                 <div id="banktransfer_qrcodes_{{ code_info.id }}"

src/pretix/presale/views/customer.py

@@ -54,6 +54,7 @@ from pretix.base.models import Customer, InvoiceAddress, Order, OrderPosition
 from pretix.base.services.mail import mail
 from pretix.base.settings import PERSON_NAME_SCHEMES
 from pretix.base.signals import customer_created, customer_signed_in
+from pretix.helpers import OF_SELF
 from pretix.helpers.compat import CompatDeleteView
 from pretix.helpers.http import redirect_to_url
 from pretix.multidomain.models import KnownDomain
@@ -280,6 +281,11 @@ class SetPasswordView(FormView):
 
     def form_valid(self, form):
         with transaction.atomic():
+            # Re-check token in transaction to prevent race condition
+            self.customer = Customer.objects.select_for_update(of=OF_SELF).get(pk=self.customer.pk)
+            if not TokenGenerator().check_token(self.customer, self.request.GET.get('token', '')):
+                return HttpResponseRedirect(self.get_success_url())
+
             self.customer.set_password(form.cleaned_data['password'])
             self.customer.is_verified = True
             self.customer.save()

src/pretix/presale/views/widget.py

@@ -122,19 +122,20 @@ def widget_css_etag(request, version, **kwargs):
         return f'{_get_source_cache_key(version)}-{request.organizer.cache.get_or_set("css_version", default=lambda: int(time.time()))}'
 
 
+# use vite by default, serve old vue2-based widget only for widget_vue2_origins
 def _use_vite(request):
-    if getattr(settings, 'PRETIX_WIDGET_VITE', False) or "beta" in request.GET:
-        return True
+    if getattr(settings, 'PRETIX_WIDGET_VUE', False) or "legacy" in request.GET:
+        return False
     origin = request.META.get('HTTP_ORIGIN', '')
     gs = GlobalSettingsObject()
-    vite_origins = gs.settings.get('widget_vite_origins', as_type=str, default='')
-    if vite_origins and not origin:
+    vue_origins = gs.settings.get('widget_vue2_origins', as_type=str, default='')
+    if vue_origins and not origin:
         referer = request.META.get('HTTP_REFERER', '')
         origin = '/'.join(referer.split('/', 3)[:3])
-    if origin and vite_origins:
-        origins_list = [o.strip() for o in vite_origins.strip().splitlines() if o.strip()]
-        return origin in origins_list
-    return False
+    if origin and vue_origins:
+        origins_list = [o.strip() for o in vue_origins.strip().splitlines() if o.strip()]
+        return origin not in origins_list
+    return True
 
 
 def widget_js_etag(request, version, lang, **kwargs):

src/pretix/settings.py

@@ -913,7 +913,7 @@ VITE_DEV_SERVER_PORT = 5173
 VITE_DEV_SERVER = f"http://localhost:{VITE_DEV_SERVER_PORT}"
 VITE_DEV_MODE = DEBUG
 VITE_IGNORE = False  # Used to ignore `collectstatic`/`rebuild`
-PRETIX_WIDGET_VITE = os.environ.get('PRETIX_WIDGET_VITE', '') not in ('', '0')
+PRETIX_WIDGET_VUE = os.environ.get('PRETIX_WIDGET_VUE', '') not in ('', '0')
 
 if DEBUG:
     # Reload if settings file changes

src/pretix/static/pretixbase/js/addressform.js

@@ -1,195 +1,193 @@
 $(function () {
-    "use strict";
+	'use strict'
 
-    // Responses are expected to only depend on the GET parameters passed, so we can have a little client-side cache
-    // to prevent fetching the same thing many times.
-    var responseCache = {};
+	// Responses are expected to only depend on the GET parameters passed, so we can have a little client-side cache
+	// to prevent fetching the same thing many times.
+	let responseCache = {}
 
-    const cleanName = (name) => {
-        // Remove form prefix
-        name = name.split("-").pop();
-        // Remove settings prefix
-        name = name.replace(/^invoice_address_from_/, "");
-        return name
-    }
+	const cleanName = (name) => {
+		// Remove form prefix
+		name = name.split('-').pop()
+		// Remove settings prefix
+		name = name.replace(/^invoice_address_from_/, '')
+		return name
+	}
 
-    $("[data-address-information-url]").each(function () {
-        let xhr;
-        const form = $(this);
-        const dependencies = $(this).find("[data-trigger-address-info]");
-        const loader = $("<span class='fa fa-cog fa-spin'></span>").hide().prependTo(dependencies.closest(".form-group").find("label").first())
-        const baseUrl = this.getAttribute('data-address-information-url')
-        const isAnyRequired = dependencies.toArray().some(function (e) { return $(e).closest(".form-group").is(".required") });
+	$('[data-address-information-url]').each(function () {
+		let xhr
+		const form = $(this)
+		const dependencies = $(this).find('[data-trigger-address-info]')
+		const loader = $('<span class=\'fa fa-cog fa-spin\'></span>').hide().prependTo(dependencies.closest('.form-group').find('label').first())
+		const baseUrl = this.getAttribute('data-address-information-url')
+		const isAnyRequired = dependencies.toArray().some(function (e) { return $(e).closest('.form-group').is('.required') })
 
-        const dependents =  {
-            'city': form.find("input[name$=city]"),
-            'zipcode': form.find("input[name$=zipcode]"),
-            'street': form.find("textarea[name$=street]"),
-            'state': form.find("select[name$=state]"),
-            'vat_id': form.find("input[name$=vat_id]"),
-        };
+		const dependents = {
+			city: form.find('input[name$=city]'),
+			zipcode: form.find('input[name$=zipcode]'),
+			street: form.find('textarea[name$=street]'),
+			state: form.find('select[name$=state]'),
+			vat_id: form.find('input[name$=vat_id]'),
+		}
 
-        form.find("select[name*=transmission_], textarea[name*=transmission_], input[name*=transmission_]").each(function () {
-            dependents[cleanName($(this).attr("name"))] = $(this)
-        })
+		form.find('select[name*=transmission_], textarea[name*=transmission_], input[name*=transmission_]').each(function () {
+			dependents[cleanName($(this).attr('name'))] = $(this)
+		})
 
-        const dependentsDisabled = [];
-        for (var k in dependents) {
-            if (dependents[k].prop("disabled")) {
-                dependentsDisabled.push(k);
-            }
-        }
+		const dependentsDisabled = []
+		for (let k in dependents) {
+			if (dependents[k].prop('disabled')) {
+				dependentsDisabled.push(k)
+			}
+		}
 
-        if (!Object.values(dependents).some((el) => el.length)) {
-            // No address fields found, do not create request
-            return;
-        }
+		if (!Object.values(dependents).some((el) => el.length)) {
+			// No address fields found, do not create request
+			return
+		}
 
-        const update_form = function (data) {
-            var selected_state = dependents.state.prop("data-selected-value");
-            if (selected_state) dependents.state.prop("data-selected-value", "");
-            dependents.state.find("option:not([value=''])").remove();
-            $.each(data.data, function (k, s) {
-                var o = $("<option>").attr("value", s.code).text(s.name);
-                if (selected_state === s.code) o.prop("selected", true);
-                dependents.state.append(o);
-            });
+		const update_form = function (data) {
+			let selected_state = dependents.state.prop('data-selected-value')
+			if (selected_state) dependents.state.prop('data-selected-value', '')
+			dependents.state.find('option:not([value=\'\'])').remove()
+			$.each(data.data, function (k, s) {
+				let o = $('<option>').attr('value', s.code).text(s.name)
+				if (selected_state === s.code) o.prop('selected', true)
+				dependents.state.append(o)
+			})
 
-            if (dependents.transmission_type) {
-                var selected_transmission_type = dependents.transmission_type.prop("data-selected-value");
-                if (selected_transmission_type) dependents.transmission_type.prop("data-selected-value", "");
-                dependents.transmission_type.find("option:not([value='']):not([value='-'])").remove();
+			if (dependents.transmission_type) {
+				let selected_transmission_type = dependents.transmission_type.prop('data-selected-value')
+				if (selected_transmission_type) dependents.transmission_type.prop('data-selected-value', '')
+				dependents.transmission_type.find('option:not([value=\'\']):not([value=\'-\'])').remove()
 
-                if (!data.transmission_type.visible) {
-                    selected_transmission_type = "email";
-                }
+				if (!data.transmission_type.visible) {
+					selected_transmission_type = 'email'
+				}
 
-                $.each(data.transmission_types, function (k, s) {
-                    var o = $("<option>").attr("value", s.code).text(s.name);
-                    if (selected_transmission_type === s.code) {
-                        o.prop("selected", true);
-                    }
-                    dependents.transmission_type.append(o);
-                });
+				$.each(data.transmission_types, function (k, s) {
+					let o = $('<option>').attr('value', s.code).text(s.name)
+					if (selected_transmission_type === s.code) {
+						o.prop('selected', true)
+					}
+					dependents.transmission_type.append(o)
+				})
+			}
 
-            }
+			for (var k in dependents) {
+				const options = data[k],
+					dependent = dependents[k]
+				let visible = 'visible' in options ? options.visible : true
 
-            for (var k in dependents) {
-                const options = data[k],
-                    dependent = dependents[k];
-                let visible = 'visible' in options ? options.visible : true;
+				if (dependent.is('[data-display-dependency]')) {
+					const dependency = $(dependent.attr('data-display-dependency'))
+					visible = visible && (
+						(dependency.attr('type') === 'checkbox' || dependency.attr('type') === 'radio') ? dependency.prop('checked') : !!dependency.val()
+					)
+				}
 
-                if (dependent.is("[data-display-dependency]")) {
-                    const dependency = $(dependent.attr("data-display-dependency"));
-                    visible = visible && (
-                        (dependency.attr("type") === 'checkbox' || dependency.attr("type") === 'radio') ? dependency.prop('checked') : !!dependency.val()
-                    );
-                }
+				if ('label' in options) {
+					dependent.closest('.form-group').find('.control-label').text(options.label)
+				}
+				if ('helptext_visible' in options) {
+					dependent.closest('.form-group').find('.help-block').toggle(options.helptext_visible)
+				}
 
-                if ('label' in options) {
-                    dependent.closest(".form-group").find(".control-label").text(options.label);
-                }
-                if ('helptext_visible' in options) {
-                    dependent.closest(".form-group").find(".help-block").toggle(options.helptext_visible);
-                }
+				const required = 'required' in options && visible && (
+					(options.required === 'if_any' && isAnyRequired)
+					|| (options.required === true)
+				)
+				dependent.closest('.form-group').toggle(visible).toggleClass('required', required)
+				dependent.prop('required', required)
 
-                const required = 'required' in options && visible && (
-                    (options.required === 'if_any' && isAnyRequired) ||
-                    (options.required === true)
-                );
-                dependent.closest(".form-group").toggle(visible).toggleClass('required', required);
-                dependent.prop("required", required);
+				const label = dependent.closest('.form-group').find('label')
+				const labelRequired = label.find('.label-required')
+				if (!required) {
+					labelRequired.remove()
+				} else if (!labelRequired.length) {
+					label.append('<i class="label-required">' + gettext('required') + '</i>')
+				}
+			}
+			for (var k in dependents) dependents[k].prop('disabled', dependentsDisabled.includes(k))
+			loader.hide()
+		}
 
-                const label = dependent.closest(".form-group").find("label");
-                const labelRequired = label.find(".label-required");
-                if (!required) {
-                    labelRequired.remove();
-                } else if (!labelRequired.length) {
-                    label.append('<i class="label-required">' + gettext('required') + '</i>')
-                }
-            }
-            for (var k in dependents) dependents[k].prop("disabled", dependentsDisabled.includes(k));
-            loader.hide();
-        }
+		const update = function (ev) {
+			dependents.state.prop('data-selected-value', dependents.state.val())
+			if (dependents.transmission_type) {
+				dependents.transmission_type.prop('data-selected-value', dependents.transmission_type.val())
+			}
 
-        const update = function (ev) {
-            dependents.state.prop("data-selected-value", dependents.state.val());
-            if (dependents.transmission_type) {
-                dependents.transmission_type.prop("data-selected-value", dependents.transmission_type.val());
-            }
+			for (let k in dependents) dependents[k].prop('disabled', true)
+			loader.show()
+			let url = new URL(baseUrl, location.href)
+			// Address depends on all annotated fields
+			form.find('[data-trigger-address-info]').each(function () {
+				// Remove prefix of the form to get actual field name
+				if (($(this).attr('type') === 'radio' || $(this).attr('type') === 'checkbox') && !$(this).prop('checked')) {
+					return
+				}
+				url.searchParams.append(cleanName($(this).attr('name')), $(this).val())
+			})
+			if (dependents.transmission_type) {
+				url.searchParams.append('transmission_type_required', !dependents.transmission_type.find('option[value=\'-\']').length)
+			}
 
-            for (var k in dependents) dependents[k].prop("disabled", true);
-            loader.show();
-            var url = new URL(baseUrl, location.href);
-            // Address depends on all annotated fields
-            form.find("[data-trigger-address-info]").each(function () {
-                // Remove prefix of the form to get actual field name
-                if (($(this).attr("type") === "radio" || $(this).attr("type") === "checkbox") && !$(this).prop("checked")) {
-                    return
-                }
-                url.searchParams.append(cleanName($(this).attr("name")), $(this).val());
-            })
-            if (dependents.transmission_type) {
-                url.searchParams.append("transmission_type_required", !dependents.transmission_type.find("option[value='-']").length);
-            }
+			if (xhr && url in responseCache) {
+				if (responseCache[url] == xhr) {
+					// already requested this, but XHR is still running and will resolve promise
+					// only re-resolve promise for JSON-data in responseCache[url]
+					return
+				} else {
+					// abort current xhr as it is not the one we want
+					// aborting deletes responseCache[url] but async
+					xhr.abort()
+				}
+			}
 
-            if (xhr && url in responseCache) {
-                if (responseCache[url] == xhr) {
-                    // already requested this, but XHR is still running and will resolve promise
-                    // only re-resolve promise for JSON-data in responseCache[url]
-                    return;
-                } else {
-                    // abort current xhr as it is not the one we want
-                    // aborting deletes responseCache[url] but async
-                    xhr.abort();
-                }
-            }
+			if (!(url in responseCache)) {
+				responseCache[url] = xhr = $.ajax({
+					dataType: 'json',
+					url: url,
+					timeout: 3000,
+				})
+			}
 
-            if (!(url in responseCache)) {
-                responseCache[url] = xhr = $.ajax({
-                    dataType: "json",
-                    url: url,
-                    timeout: 3000,
-                });
-            }
+			Promise.resolve(responseCache[url]).then(function (data) {
+				responseCache[url] = data
+				update_form(data)
+			}).catch(function () {
+				delete responseCache[url]
+				// In case of errors, show everything and require nothing, we can still handle errors in backend
+				for (let k in dependents) {
+					const dependent = dependents[k],
+						visible = true,
+						required = false
 
-            Promise.resolve(responseCache[url]).then(function (data) {
-                responseCache[url] = data;
-                update_form(data);
-            }).catch(function () {
-                delete responseCache[url];
-                // In case of errors, show everything and require nothing, we can still handle errors in backend
-                for (var k in dependents) {
-                    const dependent = dependents[k],
-                        visible = true,
-                        required = false;
+					dependent.closest('.form-group').toggle(visible).toggleClass('required', required)
+					dependent.prop('required', required).prop('disabled', dependentsDisabled.includes(k))
+				}
+			}).finally(function () {
+				loader.hide()
+			})
+		}
+		update()
+		dependencies.on('change', update)
 
-                    dependent.closest(".form-group").toggle(visible).toggleClass('required', required);
-                    dependent.prop("required", required).prop("disabled", dependentsDisabled.includes(k));
-                }
-            }).finally(function () {
-                loader.hide();
-            });
-        };
-        update();
-        dependencies.on("change", update);
-
-        if (dependents.vat_id && dependents.transmission_type && dependents.transmission_peppol_participant_id) {
-            // In Belgium, the VAT ID is built from "BE" + the company ID. The Peppol ID also needs to be built
-            // from the company ID with ID scheme 0208. We can save users some knowing and typing by filling this in!
-            if (!dependents.transmission_peppol_participant_id.val()) {
-                const fill_peppol_id = function () {
-                    const vatId = dependents.vat_id.val();
-                    if (vatId && vatId.startsWith("BE") && dependents.transmission_type.val() === "peppol") {
-                        dependents.transmission_peppol_participant_id.val("0208:" + vatId.substring(2).replaceAll(".", ""))
-                    }
-                }
-                dependents.vat_id.add(dependents.transmission_type).on("change", fill_peppol_id);
-                dependents.transmission_peppol_participant_id.one("change", () => {
-                    dependents.vat_id.add(dependents.transmission_type).unbind("change", fill_peppol_id)
-                });
-            }
-        }
-    });
-
-});
+		if (dependents.vat_id && dependents.transmission_type && dependents.transmission_peppol_participant_id) {
+			// In Belgium, the VAT ID is built from "BE" + the company ID. The Peppol ID also needs to be built
+			// from the company ID with ID scheme 0208. We can save users some knowing and typing by filling this in!
+			if (!dependents.transmission_peppol_participant_id.val()) {
+				const fill_peppol_id = function () {
+					const vatId = dependents.vat_id.val()
+					if (vatId && vatId.startsWith('BE') && dependents.transmission_type.val() === 'peppol') {
+						dependents.transmission_peppol_participant_id.val('0208:' + vatId.substring(2).replaceAll('.', ''))
+					}
+				}
+				dependents.vat_id.add(dependents.transmission_type).on('change', fill_peppol_id)
+				dependents.transmission_peppol_participant_id.one('change', () => {
+					dependents.vat_id.add(dependents.transmission_type).unbind('change', fill_peppol_id)
+				})
+			}
+		}
+	})
+})

src/pretix/static/pretixbase/js/ajaxpending.js

@@ -1,10 +1,10 @@
-var check = function () {
-    $.getJSON(location.href + '&ajax=1', function (data, status) {
-        if (data.redirect) {
-            location.href = data.redirect;
-        } else {
-            window.setTimeout(check, 500);
-        }
-    });
+let check = function () {
+	$.getJSON(location.href + '&ajax=1', function (data, _status) {
+		if (data.redirect) {
+			location.href = data.redirect
+		} else {
+			window.setTimeout(check, 500)
+		}
+	})
 }
-window.setTimeout(check, 500);
+window.setTimeout(check, 500)

src/pretix/static/pretixbase/js/asynctask.js

@@ -1,359 +1,357 @@
-/*global $, gettext */
-var async_task_id = null;
-var async_task_timeout = null;
-var async_task_check_url = null;
-var async_task_old_url = null;
-var async_task_is_download = false;
-var async_task_is_long = false;
-var async_task_dont_redirect = false;
+/* global gettext */
+let async_task_id = null
+let async_task_timeout = null
+let async_task_check_url = null
+let async_task_old_url = null
+let async_task_is_download = false
+let async_task_is_long = false
+let async_task_dont_redirect = false
 
-var async_task_status_messages = {
-    // These are functions in order to be lazily evaluated after the gettext file is loaded
-    long_task_started: () => gettext(
-        'Your request is currently being processed. Depending on the size of your event, this might take up to ' +
-        'a few minutes.'
-    ),
-    long_task_pending: () => gettext(
-        'Your request has been queued on the server and will soon be ' +
-        'processed.'
-    ),
-    short_task: () => gettext(
-        'Your request arrived on the server but we still wait for it to be ' +
-        'processed. If this takes longer than two minutes, please contact us or go ' +
-        'back in your browser and try again.'
-    )
-};
-
-function async_task_schedule_check(context, timeout) {
-    "use strict";
-    async_task_timeout = window.setTimeout(function() {
-        $.ajax(
-            {
-                'type': 'GET',
-                'url': async_task_check_url,
-                'success': async_task_check_callback,
-                'error': async_task_check_error,
-                'context': context,
-                'dataType': 'json'
-            }
-        );
-    }, timeout);
+let async_task_status_messages = {
+	// These are functions in order to be lazily evaluated after the gettext file is loaded
+	long_task_started: () => gettext(
+		'Your request is currently being processed. Depending on the size of your event, this might take up to '
+		+ 'a few minutes.'
+	),
+	long_task_pending: () => gettext(
+		'Your request has been queued on the server and will soon be '
+		+ 'processed.'
+	),
+	short_task: () => gettext(
+		'Your request arrived on the server but we still wait for it to be '
+		+ 'processed. If this takes longer than two minutes, please contact us or go '
+		+ 'back in your browser and try again.'
+	)
 }
 
-function async_task_on_success(data) {
-    "use strict";
-    if ((async_task_is_download && data.success) || async_task_dont_redirect) {
-        waitingDialog.hide();
-        if (location.href.indexOf("async_id") !== -1) {
-            history.replaceState({}, "pretix", async_task_old_url);
-        }
-    }
-    if (!async_task_dont_redirect) {
-        $(window).one("pageshow", function (e) {
-            // hide waitingDialog when using browser's history back
-            waitingDialog.hide();
-        });
-        if (async_task_is_download && window.self !== window.top) {
-            // if in an iframe, force to download an async_task_is_download
-            // e.g. pretix-reseller embeds order-page in iframe, which would cause ticket-PDFs to be displayed inline
-            var a = document.createElement("a");
-            a.href = data.redirect;
-            a.download = "";
-            a.target = "_blank";
-            a.click();
-        } else {
-            location.href = data.redirect;
-        }
-    }
-    $(this).trigger('pretix:async-task-success', data);
+function async_task_schedule_check (context, timeout) {
+	'use strict'
+	async_task_timeout = window.setTimeout(function () {
+		$.ajax(
+			{
+				type: 'GET',
+				url: async_task_check_url,
+				success: async_task_check_callback,
+				error: async_task_check_error,
+				context: context,
+				dataType: 'json'
+			}
+		)
+	}, timeout)
 }
 
-function async_task_check_callback(data, textStatus, jqXHR) {
-    "use strict";
-    if (data.ready && data.redirect) {
-        async_task_on_success.call(this, data);
-        return;
-    }
-
-    if (typeof data.percentage === "number") {
-        waitingDialog.setProgress(data.percentage);
-    }
-    if (typeof data.steps === "object" && Array.isArray(data.steps)) {
-        waitingDialog.setSteps(data.steps);
-    }
-    async_task_schedule_check(this, 250);
-
-    async_task_update_status(data);
+function async_task_on_success (data) {
+	'use strict'
+	if ((async_task_is_download && data.success) || async_task_dont_redirect) {
+		waitingDialog.hide()
+		if (location.href.indexOf('async_id') !== -1) {
+			history.replaceState({}, 'pretix', async_task_old_url)
+		}
+	}
+	if (!async_task_dont_redirect) {
+		$(window).one('pageshow', function (e) {
+			// hide waitingDialog when using browser's history back
+			waitingDialog.hide()
+		})
+		if (async_task_is_download && window.self !== window.top) {
+			// if in an iframe, force to download an async_task_is_download
+			// e.g. pretix-reseller embeds order-page in iframe, which would cause ticket-PDFs to be displayed inline
+			let a = document.createElement('a')
+			a.href = data.redirect
+			a.download = ''
+			a.target = '_blank'
+			a.click()
+		} else {
+			location.href = data.redirect
+		}
+	}
+	$(this).trigger('pretix:async-task-success', data)
 }
 
-function async_task_update_status(data) {
-    if (async_task_is_long) {
-        if (data.started) {
-            waitingDialog.setStatus(async_task_status_messages.long_task_started());
-        } else {
-            waitingDialog.setStatus(async_task_status_messages.long_task_pending());
-        }
-    } else {
-        waitingDialog.setStatus(async_task_status_messages.short_task());
-    }
+function async_task_check_callback (data, textStatus, jqXHR) {
+	'use strict'
+	if (data.ready && data.redirect) {
+		async_task_on_success.call(this, data)
+		return
+	}
+
+	if (typeof data.percentage === 'number') {
+		waitingDialog.setProgress(data.percentage)
+	}
+	if (typeof data.steps === 'object' && Array.isArray(data.steps)) {
+		waitingDialog.setSteps(data.steps)
+	}
+	async_task_schedule_check(this, 250)
+
+	async_task_update_status(data)
 }
 
-function async_task_replace_page(target, new_html) {
-    "use strict";
-    waitingDialog.hide();
-    $(target).html(new_html);
-    setup_basics($(target));
-    form_handlers($(target));
-    setup_collapsible_details($(target));
-    window.setTimeout(function () { $(window).scrollTop(0) }, 200)
-    $(document).trigger("pretix:bind-forms");
+function async_task_update_status (data) {
+	if (async_task_is_long) {
+		if (data.started) {
+			waitingDialog.setStatus(async_task_status_messages.long_task_started())
+		} else {
+			waitingDialog.setStatus(async_task_status_messages.long_task_pending())
+		}
+	} else {
+		waitingDialog.setStatus(async_task_status_messages.short_task())
+	}
 }
 
-function async_task_check_error(jqXHR, textStatus, errorThrown) {
-    "use strict";
-    var respdom = $(jqXHR.responseText);
-    var c = respdom.filter('.container');
-    if (jqXHR.status === 401 && jqXHR.getResponseHeader("X-Login-Url")) {
-      window.location = jqXHR.getResponseHeader("X-Login-Url") + "?next=" + encodeURIComponent(location.pathname + location.search + location.hash);
-      return;
-    }
-    if (respdom.filter('form') && (respdom.filter('.has-error') || respdom.filter('.alert-danger'))) {
-        // This is a failed form validation, let's just use it
-        $("body").data('ajaxing', false);
-        async_task_replace_page("body", jqXHR.responseText.substring(
-            jqXHR.responseText.indexOf("<body"),
-            jqXHR.responseText.indexOf("</body")
-        ));
-    } else if (c.length > 0) {
-        // This is some kind of 500/404/403 page, show it in an overlay
-        $("body").data('ajaxing', false);
-        waitingDialog.hide();
-        if (location.href.indexOf("async_id") !== -1) {
-            history.replaceState({}, "pretix", async_task_old_url);
-        }
-        ajaxErrDialog.show(c.first().html());
-    } else {
-        if (jqXHR.status >= 400 && jqXHR.status < 500) {
-            $("body").data('ajaxing', false);
-            waitingDialog.hide();
-            alert(gettext('An error of type {code} occurred.').replace(/\{code\}/, jqXHR.status));
-        } else {
-            // 500 can be an application error or overload in some cases :(
-            waitingDialog.setStatus(gettext('We currently cannot reach the server, but we keep trying.' +
-                                            ' Last error code: {code}').replace(/\{code\}/, jqXHR.status));
-            async_task_schedule_check(this, 5000);
-        }
-    }
+function async_task_replace_page (target, new_html) {
+	'use strict'
+	waitingDialog.hide()
+	$(target).html(new_html)
+	setup_basics($(target))
+	form_handlers($(target))
+	setup_collapsible_details($(target))
+	window.setTimeout(function () { $(window).scrollTop(0) }, 200)
+	$(document).trigger('pretix:bind-forms')
 }
 
-function async_task_callback(data, jqXHR, status) {
-    "use strict";
-    $("body").data('ajaxing', false);
-    if (data.redirect) {
-        async_task_on_success.call(this, data);
-        return;
-    }
-    var check_url = new URL(data.check_url, window.location);
-    if (async_task_dont_redirect) {
-        check_url.searchParams.set('ajax_dont_redirect', '1');
-    }
-    async_task_id = data.async_id;
-    async_task_check_url = check_url.toString();
-    async_task_schedule_check(this, 100);
-
-    async_task_update_status(data);
-
-    if (location.href.indexOf("async_id") === -1) {
-        history.pushState({}, "Waiting", async_task_check_url.replace(/ajax=1/, ''));
-    }
+function async_task_check_error (jqXHR, textStatus, errorThrown) {
+	'use strict'
+	let respdom = $(jqXHR.responseText)
+	let c = respdom.filter('.container')
+	if (jqXHR.status === 401 && jqXHR.getResponseHeader('X-Login-Url')) {
+		window.location = jqXHR.getResponseHeader('X-Login-Url') + '?next=' + encodeURIComponent(location.pathname + location.search + location.hash)
+		return
+	}
+	if (respdom.filter('form') && (respdom.filter('.has-error') || respdom.filter('.alert-danger'))) {
+		// This is a failed form validation, let's just use it
+		$('body').data('ajaxing', false)
+		async_task_replace_page('body', jqXHR.responseText.substring(
+			jqXHR.responseText.indexOf('<body'),
+			jqXHR.responseText.indexOf('</body')
+		))
+	} else if (c.length > 0) {
+		// This is some kind of 500/404/403 page, show it in an overlay
+		$('body').data('ajaxing', false)
+		waitingDialog.hide()
+		if (location.href.indexOf('async_id') !== -1) {
+			history.replaceState({}, 'pretix', async_task_old_url)
+		}
+		ajaxErrDialog.show(c.first().html())
+	} else {
+		if (jqXHR.status >= 400 && jqXHR.status < 500) {
+			$('body').data('ajaxing', false)
+			waitingDialog.hide()
+			alert(gettext('An error of type {code} occurred.').replace(/\{code\}/, jqXHR.status))
+		} else {
+			// 500 can be an application error or overload in some cases :(
+			waitingDialog.setStatus(gettext('We currently cannot reach the server, but we keep trying.'
+				+ ' Last error code: {code}').replace(/\{code\}/, jqXHR.status))
+			async_task_schedule_check(this, 5000)
+		}
+	}
 }
 
-function async_task_error(jqXHR, textStatus, errorThrown) {
-    "use strict";
-    $("body").data('ajaxing', false);
-    if (jqXHR.status === 401 && jqXHR.getResponseHeader("X-Login-Url")) {
-      window.location = jqXHR.getResponseHeader("X-Login-Url") + "?next=" + encodeURIComponent(location.pathname + location.search + location.hash);
-      return;
-    }
-    waitingDialog.hide();
-    if (textStatus === "timeout") {
-        alert(gettext("The request took too long. Please try again."));
-    } else if (jqXHR.responseText.indexOf('<html') > 0) {
-        var respdom = $(jqXHR.responseText);
-        var c = respdom.filter('.container');
-        if (respdom.filter('form') && (respdom.filter('.has-error') || respdom.filter('.alert-danger'))) {
-            if (respdom.filter('#page-wrapper') && $('#page-wrapper').length) {
-                // This is a failed form validation, let's just use it
-                async_task_replace_page("#page-wrapper", respdom.find("#page-wrapper").html());
-            } else {
-                async_task_replace_page("body", jqXHR.responseText.substring(
-                    jqXHR.responseText.indexOf("<body"),
-                    jqXHR.responseText.indexOf("</body")
-                ));
-                document.dispatchEvent(new Event("pretix:async-task-error"))
+function async_task_callback (data, jqXHR, status) {
+	'use strict'
+	$('body').data('ajaxing', false)
+	if (data.redirect) {
+		async_task_on_success.call(this, data)
+		return
+	}
+	let check_url = new URL(data.check_url, window.location)
+	if (async_task_dont_redirect) {
+		check_url.searchParams.set('ajax_dont_redirect', '1')
+	}
+	async_task_id = data.async_id
+	async_task_check_url = check_url.toString()
+	async_task_schedule_check(this, 100)
 
-            }
+	async_task_update_status(data)
 
-        } else if (c.length > 0) {
-            // This is some kind of 500/404/403 page, show it in an overlay
-            ajaxErrDialog.show(c.first().html());
-        } else {
-            alert(gettext('An error of type {code} occurred.').replace(/\{code\}/, jqXHR.status));
-        }
-    } else {
-        if (jqXHR.status >= 400 && jqXHR.status < 500) {
-            alert(gettext('An error of type {code} occurred.').replace(/\{code\}/, jqXHR.status));
-        } else {
-            alert(gettext('We currently cannot reach the server. Please try again. ' +
-                          'Error code: {code}').replace(/\{code\}/, jqXHR.status));
-        }
-    }
+	if (location.href.indexOf('async_id') === -1) {
+		history.pushState({}, 'Waiting', async_task_check_url.replace(/ajax=1/, ''))
+	}
+}
+
+function async_task_error (jqXHR, textStatus, errorThrown) {
+	'use strict'
+	$('body').data('ajaxing', false)
+	if (jqXHR.status === 401 && jqXHR.getResponseHeader('X-Login-Url')) {
+		window.location = jqXHR.getResponseHeader('X-Login-Url') + '?next=' + encodeURIComponent(location.pathname + location.search + location.hash)
+		return
+	}
+	waitingDialog.hide()
+	if (textStatus === 'timeout') {
+		alert(gettext('The request took too long. Please try again.'))
+	} else if (jqXHR.responseText.indexOf('<html') > 0) {
+		let respdom = $(jqXHR.responseText)
+		let c = respdom.filter('.container')
+		if (respdom.filter('form') && (respdom.filter('.has-error') || respdom.filter('.alert-danger'))) {
+			if (respdom.filter('#page-wrapper') && $('#page-wrapper').length) {
+				// This is a failed form validation, let's just use it
+				async_task_replace_page('#page-wrapper', respdom.find('#page-wrapper').html())
+			} else {
+				async_task_replace_page('body', jqXHR.responseText.substring(
+					jqXHR.responseText.indexOf('<body'),
+					jqXHR.responseText.indexOf('</body')
+				))
+				document.dispatchEvent(new Event('pretix:async-task-error'))
+			}
+		} else if (c.length > 0) {
+			// This is some kind of 500/404/403 page, show it in an overlay
+			ajaxErrDialog.show(c.first().html())
+		} else {
+			alert(gettext('An error of type {code} occurred.').replace(/\{code\}/, jqXHR.status))
+		}
+	} else {
+		if (jqXHR.status >= 400 && jqXHR.status < 500) {
+			alert(gettext('An error of type {code} occurred.').replace(/\{code\}/, jqXHR.status))
+		} else {
+			alert(gettext('We currently cannot reach the server. Please try again. '
+				+ 'Error code: {code}').replace(/\{code\}/, jqXHR.status))
+		}
+	}
 }
 
 $(function () {
-    "use strict";
-    $("body").on('submit', 'form[data-asynctask]', function (e) {
-        // Not supported on IE, may lead to wrong results, but we don't support IE in the backend anymore
-        var submitter = e.originalEvent ? e.originalEvent.submitter : null;
+	'use strict'
+	$('body').on('submit', 'form[data-asynctask]', function (e) {
+		// Not supported on IE, may lead to wrong results, but we don't support IE in the backend anymore
+		let submitter = e.originalEvent ? e.originalEvent.submitter : null
 
-        if (submitter && submitter.hasAttribute("data-no-asynctask")) {
-            return;
-        }
+		if (submitter && submitter.hasAttribute('data-no-asynctask')) {
+			return
+		}
 
-        e.preventDefault();
-        $(this).removeClass("dirty");  // Avoid problems with are-you-sure.js
-        if ($("body").data('ajaxing')) {
-            return;
-        }
-        async_task_id = null;
-        async_task_is_download = $(this).is("[data-asynctask-download]");
-        async_task_dont_redirect = $(this).is("[data-asynctask-no-redirect]");
-        async_task_is_long = $(this).is("[data-asynctask-long]");
-        async_task_old_url = location.href;
-        $("body").data('ajaxing', true);
-        waitingDialog.show(
-            $(this).attr("data-asynctask-headline") || gettext('We are processing your request …'),
-            $(this).attr("data-asynctask-text") || '',
-            gettext(
-                'We are currently sending your request to the server. If this takes longer ' +
-                'than one minute, please check your internet connection and then reload ' +
-                'this page and try again.'
-            )
-        );
+		e.preventDefault()
+		$(this).removeClass('dirty') // Avoid problems with are-you-sure.js
+		if ($('body').data('ajaxing')) {
+			return
+		}
+		async_task_id = null
+		async_task_is_download = $(this).is('[data-asynctask-download]')
+		async_task_dont_redirect = $(this).is('[data-asynctask-no-redirect]')
+		async_task_is_long = $(this).is('[data-asynctask-long]')
+		async_task_old_url = location.href
+		$('body').data('ajaxing', true)
+		waitingDialog.show(
+			$(this).attr('data-asynctask-headline') || gettext('We are processing your request …'),
+			$(this).attr('data-asynctask-text') || '',
+			gettext(
+				'We are currently sending your request to the server. If this takes longer '
+				+ 'than one minute, please check your internet connection and then reload '
+				+ 'this page and try again.'
+			)
+		)
 
-        var action = this.action;
-        var formData = new FormData(this);
-        formData.append('ajax', '1');
-        if (async_task_dont_redirect) {
-            formData.append('ajax_dont_redirect', '1');
-        }
-        if (submitter && submitter.name) {
-            formData.append(submitter.name, submitter.value);
-        }
-        if (submitter && submitter.getAttribute("formaction")) {
-            action = submitter.getAttribute("formaction");
-        }
-        $.ajax(
-            {
-                'type': 'POST',
-                'url': action,
-                'data': formData,
-                processData: false,
-                contentType: false,
-                'success': async_task_callback,
-                'error': async_task_error,
-                'context': this,
-                'dataType': 'json',
-                'timeout': 60000,
-            }
-        );
-    });
+		let action = this.action
+		let formData = new FormData(this)
+		formData.append('ajax', '1')
+		if (async_task_dont_redirect) {
+			formData.append('ajax_dont_redirect', '1')
+		}
+		if (submitter && submitter.name) {
+			formData.append(submitter.name, submitter.value)
+		}
+		if (submitter && submitter.getAttribute('formaction')) {
+			action = submitter.getAttribute('formaction')
+		}
+		$.ajax(
+			{
+				type: 'POST',
+				url: action,
+				data: formData,
+				processData: false,
+				contentType: false,
+				success: async_task_callback,
+				error: async_task_error,
+				context: this,
+				dataType: 'json',
+				timeout: 60000,
+			}
+		)
+	})
 
-    window.addEventListener("pageshow", function (evt) {
-        // In Safari, if you submit an async task, then get redirected, then go back,
-        // Safari won't reload the HTML from disk cache but instead reuse the DOM of the
-        // previous request, thus not clearing the "loading" state.
-        if (evt.persisted && $("body").hasClass("loading")) {
-            setTimeout(function () {
-                window.location.reload();
-            }, 10);
-        }
-    }, false);
+	window.addEventListener('pageshow', function (evt) {
+		// In Safari, if you submit an async task, then get redirected, then go back,
+		// Safari won't reload the HTML from disk cache but instead reuse the DOM of the
+		// previous request, thus not clearing the "loading" state.
+		if (evt.persisted && $('body').hasClass('loading')) {
+			setTimeout(function () {
+				window.location.reload()
+			}, 10)
+		}
+	}, false)
 
-    $("#ajaxerr").on("click", ".ajaxerr-close", ajaxErrDialog.hide);
-    $("#loadingmodal").on("cancel", function() {
-        return false;
-    });
-    $("#loadingmodal").prop("closedBy", "none");
-});
+	$('#ajaxerr').on('click', '.ajaxerr-close', ajaxErrDialog.hide)
+	$('#loadingmodal').on('cancel', function () {
+		return false
+	})
+	$('#loadingmodal').prop('closedBy', 'none')
+})
 
 var waitingDialog = {
-    show: function (title, text, status) {
-        "use strict";
-        this.setTitle(title);
-        this.setText(text);
-        this.setStatus(status || gettext('If this takes longer than a few minutes, please contact us.'));
-        this.setProgress(null);
-        this.setSteps(null);
-        document.getElementById("loadingmodal").showModal();
-    },
-    hide: function () {
-        "use strict";
-        document.getElementById("loadingmodal").close();
-    },
-    setTitle: function(title) {
-        $("#loadingmodal .modal-card-title").text(title);
-    },
-    setStatus: function(statusText) {
-        $("#loadingmodal p.status").text(statusText);
-    },
-    setText: function(text) {
-        if (text)
-            $("#loadingmodal .modal-card-description").text(text).show();
-        else
-            $("#loadingmodal .modal-card-description").hide();
-    },
-    setProgress: function(percentage) {
-        if (typeof percentage === 'number') {
-            $("#loadingmodal .progress").show();
-            $("#loadingmodal .progress .progress-bar").css("width", percentage + "%");
-        } else {
-            $("#loadingmodal .progress").hide();
-        }
-    },
-    setSteps: function(steps) {
-        var $steps = $("#loadingmodal .steps");
-        if (steps) {
-            $steps.html("").show()
-            for (var step of steps) {
-                $steps.append(
-                    $("<span>").addClass("fa fa-fw")
-                        .toggleClass("fa-check text-success", step.done)
-                        .toggleClass("fa-cog fa-spin text-muted", !step.done)
-                ).append(
-                    $("<span>").text(step.label)
-                ).append(
-                    $("<br>")
-                )
-            }
-        } else {
-            $steps.hide();
-        }
-    }
-};
+	show: function (title, text, status) {
+		'use strict'
+		this.setTitle(title)
+		this.setText(text)
+		this.setStatus(status || gettext('If this takes longer than a few minutes, please contact us.'))
+		this.setProgress(null)
+		this.setSteps(null)
+		document.getElementById('loadingmodal').showModal()
+	},
+	hide: function () {
+		'use strict'
+		document.getElementById('loadingmodal').close()
+	},
+	setTitle: function (title) {
+		$('#loadingmodal .modal-card-title').text(title)
+	},
+	setStatus: function (statusText) {
+		$('#loadingmodal p.status').text(statusText)
+	},
+	setText: function (text) {
+		if (text)
+			$('#loadingmodal .modal-card-description').text(text).show()
+		else
+			$('#loadingmodal .modal-card-description').hide()
+	},
+	setProgress: function (percentage) {
+		if (typeof percentage === 'number') {
+			$('#loadingmodal .progress').show()
+			$('#loadingmodal .progress .progress-bar').css('width', percentage + '%')
+		} else {
+			$('#loadingmodal .progress').hide()
+		}
+	},
+	setSteps: function (steps) {
+		let $steps = $('#loadingmodal .steps')
+		if (steps) {
+			$steps.html('').show()
+			for (let step of steps) {
+				$steps.append(
+					$('<span>').addClass('fa fa-fw')
+						.toggleClass('fa-check text-success', step.done)
+						.toggleClass('fa-cog fa-spin text-muted', !step.done)
+				).append(
+					$('<span>').text(step.label)
+				).append(
+					$('<br>')
+				)
+			}
+		} else {
+			$steps.hide()
+		}
+	}
+}
 
 var ajaxErrDialog = {
-    show: function (c) {
-        "use strict";
-        $("#ajaxerr").html(c);
-        $("#ajaxerr .links").html("<a class='btn btn-default ajaxerr-close'>"
-                                  + gettext("Close message") + "</a>");
-        $("body").addClass("ajaxerr has-modal-dialog");
-        $("#ajaxerr").prop("hidden", false);
-    },
-    hide: function () {
-        "use strict";
-        $("body").removeClass("ajaxerr has-modal-dialog");
-        $("#ajaxerr").prop("hidden", true);
-    },
-};
+	show: function (c) {
+		'use strict'
+		$('#ajaxerr').html(c)
+		$('#ajaxerr .links').html('<a class=\'btn btn-default ajaxerr-close\'>'
+			+ gettext('Close message') + '</a>')
+		$('body').addClass('ajaxerr has-modal-dialog')
+		$('#ajaxerr').prop('hidden', false)
+	},
+	hide: function () {
+		'use strict'
+		$('body').removeClass('ajaxerr has-modal-dialog')
+		$('#ajaxerr').prop('hidden', true)
+	},
+}

src/pretix/static/pretixbase/js/deanonymize_email.js

@@ -1,7 +1,7 @@
-document.addEventListener('DOMContentLoaded', function() {
-    document.querySelectorAll('a[href^="mailto:"]').forEach(function(link) {
-        // Replace [at] with @ and the [dot] with . in both the href and the displayed text (if needed)
-        link.href = link.href.replace('[at]', '@').replace('[dot]', '.');
-        link.textContent = link.textContent.replace('[at]', '@').replace('[dot]', '.');
-    });
-});
+document.addEventListener('DOMContentLoaded', function () {
+	document.querySelectorAll('a[href^="mailto:"]').forEach(function (link) {
+		// Replace [at] with @ and the [dot] with . in both the href and the displayed text (if needed)
+		link.href = link.href.replace('[at]', '@').replaceAll('[dot]', '.')
+		link.textContent = link.textContent.replace('[at]', '@').replaceAll('[dot]', '.')
+	})
+})

src/pretix/static/pretixbase/js/details.js

@@ -1,152 +1,149 @@
-/*global $ */
-
 setup_collapsible_details = function (el) {
+	el.find('.sneak-peek-trigger').each(function () {
+		let trigger = this
+		let button = this.querySelector('button')
+		let content = document.getElementById(button.getAttribute('aria-controls'))
+		if (content.scrollHeight < 200) {
+			trigger.remove()
+			content.classList.remove('sneak-peek-content')
+			return
+		}
+		content.setAttribute('aria-hidden', 'true')
+		content.setAttribute('inert', true)
+		button.setAttribute('aria-expanded', 'false')
+		button.addEventListener('click', function (e) {
+			button.setAttribute('aria-expanded', 'true')
+			content.setAttribute('aria-hidden', 'false')
+			content.removeAttribute('inert')
 
-    el.find('.sneak-peek-trigger').each(function() {
-        var trigger = this;
-        var button = this.querySelector('button');
-        var content = document.getElementById(button.getAttribute('aria-controls'));
-        if (content.scrollHeight < 200) {
-            trigger.remove();
-            content.classList.remove('sneak-peek-content');
-            return;
-        }
-        content.setAttribute('aria-hidden', 'true');
-        content.setAttribute('inert', true);
-        button.setAttribute('aria-expanded', 'false');
-        button.addEventListener('click', function (e) {
-            button.setAttribute('aria-expanded', 'true');
-            content.setAttribute('aria-hidden', 'false');
-            content.removeAttribute('inert');
+			content.addEventListener('transitionend', function () {
+				content.classList.remove('sneak-peek-content')
+				content.style.removeProperty('height')
+				// we need to keep the trigger/button in the DOM to not irritate screenreaders toggling visibility
+				trigger.classList.add('sr-only')
+			}, { once: true })
+			content.style.height = content.scrollHeight + 'px'
 
-            content.addEventListener('transitionend', function() {
-                content.classList.remove('sneak-peek-content');
-                content.style.removeProperty('height');
-                // we need to keep the trigger/button in the DOM to not irritate screenreaders toggling visibility
-                trigger.classList.add('sr-only');
-            }, {once: true});
-            content.style.height = content.scrollHeight + 'px';
+			button.addEventListener('click', function (e) {
+				// this will be called by screenreader users if they kept focus on the button after expanding
+				// we need to keep the trigger/button in the DOM to not irritate screenreaders toggling visibility
+				let expanded = button.getAttribute('aria-expanded') == 'true'
+				button.setAttribute('aria-expanded', !expanded)
+				content.setAttribute('aria-hidden', expanded)
+			})
+			button.addEventListener('blur', function (e) {
+				// if content is visible and the user leaves the button, we can safely remove the trigger/button
+				if (button.getAttribute('aria-expanded') == 'true') {
+					trigger.remove()
+				}
+			})
+		}, { once: true })
 
-            button.addEventListener('click', function (e) {
-                // this will be called by screenreader users if they kept focus on the button after expanding
-                // we need to keep the trigger/button in the DOM to not irritate screenreaders toggling visibility
-                var expanded = button.getAttribute('aria-expanded') == 'true';
-                button.setAttribute('aria-expanded', !expanded);
-                content.setAttribute('aria-hidden', expanded);
-            });
-            button.addEventListener('blur', function (e) {
-                // if content is visible and the user leaves the button, we can safely remove the trigger/button
-                if (button.getAttribute('aria-expanded') == 'true') {
-                    trigger.remove();
-                }
-            });
-        }, { once: true });
+		let container = this.closest('details.sneak-peek-container')
+		if (container) {
+			function removeSneekPeakWhenClosed (e) {
+				if (e.newState == 'closed') {
+					container.removeEventListener('toggle', removeSneekPeakWhenClosed)
+					trigger.remove()
+					content.removeAttribute('aria-hidden')
+					content.removeAttribute('inert')
+					content.classList.remove('sneak-peek-content')
+				}
+			}
+			container.addEventListener('toggle', removeSneekPeakWhenClosed)
+		}
+	})
 
-        var container = this.closest('details.sneak-peek-container');
-        if (container) {
-            function removeSneekPeakWhenClosed(e) {
-                if (e.newState == "closed") {
-                    container.removeEventListener("toggle", removeSneekPeakWhenClosed);
-                    trigger.remove();
-                    content.removeAttribute('aria-hidden');
-                    content.removeAttribute('inert');
-                    content.classList.remove('sneak-peek-content');
-                }
-            }
-            container.addEventListener("toggle", removeSneekPeakWhenClosed);
-        }
-    });
+	let isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]'
+	el.find('details summary').click(function (e) {
+		if (this.tagName !== 'A' && $(e.target).closest('a').length > 0) {
+			return true
+		}
+		let $details = $(this).closest('details')
+		let isOpen = $details.prop('open')
+		let $detailsNotSummary = $details.children(':not(summary)')
+		if ($detailsNotSummary.is(':animated')) {
+			e.preventDefault()
+			return false
+		}
+		if (isOpen) {
+			$details.removeClass('details-open')
+			$detailsNotSummary.stop().show().slideUp(500, function () {
+				$details.prop('open', false)
+			})
+		} else {
+			$detailsNotSummary.stop().hide()
+			$details.prop('open', true)
+			$details.addClass('details-open')
+			$detailsNotSummary.slideDown()
+		}
+		e.preventDefault()
+		return false
+	}).keyup(function (event) {
+		if (32 == event.keyCode || (13 == event.keyCode && !isOpera)) {
+			// Space or Enter is pressed — trigger the `click` event on the `summary` element
+			// Opera already seems to trigger the `click` event when Enter is pressed
+			event.preventDefault()
+			$(this).click()
+		}
+	})
 
-    var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';
-    el.find("details summary").click(function (e) {
-        if (this.tagName !== "A" && $(e.target).closest("a").length > 0) {
-            return true;
-        }
-        var $details = $(this).closest("details");
-        var isOpen = $details.prop("open");
-        var $detailsNotSummary = $details.children(':not(summary)');
-        if ($detailsNotSummary.is(':animated')) {
-            e.preventDefault();
-            return false;
-        }
-        if (isOpen) {
-            $details.removeClass("details-open");
-            $detailsNotSummary.stop().show().slideUp(500, function () {
-                $details.prop("open", false);
-            });
-        } else {
-            $detailsNotSummary.stop().hide();
-            $details.prop("open", true);
-            $details.addClass("details-open");
-            $detailsNotSummary.slideDown();
-        }
-        e.preventDefault();
-        return false;
-    }).keyup(function (event) {
-        if (32 == event.keyCode || (13 == event.keyCode && !isOpera)) {
-            // Space or Enter is pressed — trigger the `click` event on the `summary` element
-            // Opera already seems to trigger the `click` event when Enter is pressed
-            event.preventDefault();
-            $(this).click();
-        }
-    });
+	$('details').each(function () {
+		let $details = $(this),
+			$detailsSummary = $('summary', $details).first(),
+			$detailsNotSummary = $details.children(':not(summary)')
+		$details.prop('open', typeof $details.attr('open') == 'string')
+		if (!$details.prop('open')) {
+			if ($details.find('.has-error, .alert-danger').length) {
+				$details.addClass('details-open')
+				$details.prop('open', true)
+			} else {
+				$detailsNotSummary.hide()
+			}
+		} else {
+			$details.addClass('details-open')
+		}
+		$detailsSummary.attr({
+			role: 'button',
+			'aria-controls': $details.attr('id')
+		}).prop('tabIndex', 0).bind('selectstart dragstart mousedown', function () {
+			return false
+		})
+	})
 
-    $('details').each(function () {
-        var $details = $(this),
-            $detailsSummary = $('summary', $details).first(),
-            $detailsNotSummary = $details.children(':not(summary)');
-        $details.prop('open', typeof $details.attr('open') == 'string');
-        if (!$details.prop('open')) {
-            if ($details.find(".has-error, .alert-danger").length) {
-                $details.addClass("details-open");
-                $details.prop('open', true);
-            } else {
-                $detailsNotSummary.hide();
-            }
-        } else {
-            $details.addClass("details-open");
-        }
-        $detailsSummary.attr({
-            'role': 'button',
-            'aria-controls': $details.attr('id')
-        }).prop('tabIndex', 0).bind('selectstart dragstart mousedown', function () {
-            return false;
-        });
-    });
+	el.find('article button[data-toggle=variations]').click(function (e) {
+		let $button = $(this)
+		let $details = $button.closest('article')
+		let $detailsNotSummary = $button.attr('aria-controls') ? $('#' + $button.attr('aria-controls')) : $('.variations', $details)
+		let isOpen = !$detailsNotSummary.prop('hidden')
+		if ($detailsNotSummary.is(':animated')) {
+			e.preventDefault()
+			return false
+		}
 
-    el.find("article button[data-toggle=variations]").click(function (e) {
-        var $button = $(this);
-        var $details = $button.closest("article");
-        var $detailsNotSummary = $button.attr("aria-controls") ? $('#' + $button.attr("aria-controls")) : $(".variations", $details);
-        var isOpen = !$detailsNotSummary.prop("hidden");
-        if ($detailsNotSummary.is(':animated')) {
-            e.preventDefault();
-            return false;
-        }
+		let altLabel = $button.attr('data-label-alt')
+		$button.attr('data-label-alt', $button.text().trim())
+		$button.find('span').text(altLabel)
+		$button.attr('aria-expanded', !isOpen)
 
-        var altLabel = $button.attr("data-label-alt");
-        $button.attr("data-label-alt", $button.text().trim());
-        $button.find("span").text(altLabel);
-        $button.attr("aria-expanded", !isOpen);
-
-        if (isOpen) {
-            $details.removeClass("details-open");
-            $detailsNotSummary.stop().show().slideUp(500, function () {
-                $detailsNotSummary.prop("hidden", true);
-            });
-        } else {
-            $detailsNotSummary.prop("hidden", false).stop().hide();
-            $details.addClass("details-open");
-            $detailsNotSummary.slideDown();
-        }
-        e.preventDefault();
-        return false;
-    });
-    el.find(".variations-collapsed").prop("hidden", true);
-};
+		if (isOpen) {
+			$details.removeClass('details-open')
+			$detailsNotSummary.stop().show().slideUp(500, function () {
+				$detailsNotSummary.prop('hidden', true)
+			})
+		} else {
+			$detailsNotSummary.prop('hidden', false).stop().hide()
+			$details.addClass('details-open')
+			$detailsNotSummary.slideDown()
+		}
+		e.preventDefault()
+		return false
+	})
+	el.find('.variations-collapsed').prop('hidden', true)
+}
 
 $(function () {
-    "use strict";
+	'use strict'
 
-    setup_collapsible_details($("body"));
-});
+	setup_collapsible_details($('body'))
+})

src/pretix/static/pretixbase/js/errors.js

@@ -1,11 +1,11 @@
 ['DOMContentLoaded', 'pretix:async-task-error'].forEach(function (ev) {
-  document.addEventListener(ev, function () {
-    document.querySelectorAll('#goback, #reload').forEach(function (element) {
-      const regularLoad = ev === 'DOMContentLoaded' && element.id === 'goback';
-      element.addEventListener('click', regularLoad
-        ? () => window.history.back()
-        : () => window.location.reload()
-      );
-    });
-  });
-});
+	document.addEventListener(ev, function () {
+		document.querySelectorAll('#goback, #reload').forEach(function (element) {
+			const regularLoad = ev === 'DOMContentLoaded' && element.id === 'goback'
+			element.addEventListener('click', regularLoad
+				? () => window.history.back()
+				: () => window.location.reload()
+			)
+		})
+	})
+})

src/pretix/static/pretixbase/js/framebreak.js

@@ -1,3 +1,3 @@
 // Attempt to auto-open page in new tab. Will be ignored by most browser's popup blockers anyways, though.
-var url = JSON.parse(document.getElementById('framebreak-url').innerText)
+let url = JSON.parse(document.getElementById('framebreak-url').innerText)
 window.open(url)

src/pretix/static/pretixbase/js/gettextstub.js

@@ -1,30 +1,29 @@
 // The actual gettext implementation is loaded asynchronously with the translation
-function gettext(msgid) {
-    if (typeof django !== 'undefined' && typeof django.gettext !== 'undefined') {
-        return django.gettext(msgid);
-    }
-    return msgid;
+function gettext (msgid) {
+	if (typeof django !== 'undefined' && typeof django.gettext !== 'undefined') {
+		return django.gettext(msgid)
+	}
+	return msgid
 }
 
-function ngettext(singular, plural, count) {
-    if (typeof django !== 'undefined' && typeof django.ngettext !== 'undefined') {
-        return django.ngettext(singular, plural, count);
-    }
-    return plural;
+function ngettext (singular, plural, count) {
+	if (typeof django !== 'undefined' && typeof django.ngettext !== 'undefined') {
+		return django.ngettext(singular, plural, count)
+	}
+	return plural
 }
 
-function pgettext(context, msgid) {
-    if (typeof django !== 'undefined' && typeof django.pgettext !== 'undefined') {
-        return django.pgettext(context, msgid);
-    }
-    return msgid;
+function pgettext (context, msgid) {
+	if (typeof django !== 'undefined' && typeof django.pgettext !== 'undefined') {
+		return django.pgettext(context, msgid)
+	}
+	return msgid
 }
 
-function interpolate(fmt, object, named) {
-    if (named) {
-        return fmt.replace(/%\(\w+\)s/g, function(match){return String(obj[match.slice(2,-2)])});
-    } else {
-        return fmt.replace(/%s/g, function(match){return String(obj.shift())});
-    }
+function interpolate (fmt, object, named) {
+	if (named) {
+		return fmt.replace(/%\(\w+\)s/g, function (match) { return String(obj[match.slice(2, -2)]) })
+	} else {
+		return fmt.replace(/%s/g, function (match) { return String(obj.shift()) })
+	}
 }
-

src/pretix/static/pretixbase/js/i18nstring.js

@@ -1,25 +1,24 @@
-function i18nstring_localize(o) {
-    var locale = document.body.attributes['data-pretixlocale'].value
-    var short_locale = locale.split('-')[0]
-    if (o[locale])
-        return o[locale]
+function i18nstring_localize (o) {
+	let locale = document.body.attributes['data-pretixlocale'].value
+	let short_locale = locale.split('-')[0]
+	if (o[locale])
+		return o[locale]
 
-    if (o[short_locale])
-        return o[short_locale]
+	if (o[short_locale])
+		return o[short_locale]
 
-    for (k of Object.keys(o)) {
-        if (k.split('-')[0] === short_locale && o[k]) {
-            return o[k]
-        }
-    }
+	for (let k of Object.keys(o)) {
+		if (k.split('-')[0] === short_locale && o[k]) {
+			return o[k]
+		}
+	}
 
-    if (o['en'])
-        return o['en']
+	if (o['en'])
+		return o['en']
 
-    for (k of Object.keys(o)) {
-        if (o[k]) {
-            return o[k]
-        }
-    }
+	for (let k of Object.keys(o)) {
+		if (o[k]) {
+			return o[k]
+		}
+	}
 }
-

src/pretix/static/pretixbase/js/reldate.js

@@ -32,7 +32,7 @@ $(document).on('pretix:bind-forms', () => {
 				}
 
 				if (dirty) {
-					beforeAfterSelect.dispatchEvent(new Event('change', {bubbles: true}))
+					beforeAfterSelect.dispatchEvent(new Event('change', { bubbles: true }))
 				}
 			}
 			referenceSelect.addEventListener('change', updateBeforeOption)

src/pretix/static/pretixbase/js/reloadpending.js

@@ -1,8 +1,8 @@
-var intId = window.setInterval(function () {
-    $.get(location.href + '?ajax=1', function (data, status) {
-        if (data === "1") {
-            window.clearInterval(intId);
-            location.reload();
-        }
-    });
-}, 500);
+const intId = window.setInterval(function () {
+	$.get(location.href + '?ajax=1', function (data, _status) {
+		if (data === '1') {
+			window.clearInterval(intId)
+			location.reload()
+		}
+	})
+}, 500)

src/pretix/static/pretixbase/scss/_dialogs.scss

@@ -170,13 +170,14 @@ body.has-modal-dialog .container, body.has-modal-dialog #wrapper {
 #lightbox-dialog {
   width: fit-content;
   max-width: 80%;
-  min-width: 24em;
+  min-width: calc(min(24em, 90%));
   .modal-card-content {
     padding: 2.5em;
   }
 
   img {
     max-width: 100%;
+    max-height: calc(100dvh - 60px - 5em - 5em);
   }
 
   button {

src/pretix/static/pretixcontrol/js/auth.js

@@ -1,21 +1,21 @@
-var hiddenfield = document.querySelector("input[name=origin][type=hidden]");
+let hiddenfield = document.querySelector('input[name=origin][type=hidden]')
 if (hiddenfield) {
-    hiddenfield.value = window.location.origin
+	hiddenfield.value = window.location.origin
 }
-async function runCheck() {
-    if (document.getElementById("good_origin")) {
-        if (document.getElementById("good_origin").innerText.split('').reverse().join('') !== window.location.origin) {
-            const response = await fetch(document.getElementById("bad_origin_report_url").innerText.split('').reverse().join(''), {
-                method: "POST",
-                mode: "cors",
-                referrerPolicy: "unsafe-url",
-                headers: {
-                    "Content-Type": "application/x-www-form-urlencoded",
-                },
-                body: "origin=" + window.location.origin,
-            });
-        }
-    }
+async function runCheck () {
+	if (document.getElementById('good_origin')) {
+		if (document.getElementById('good_origin').innerText.split('').reverse().join('') !== window.location.origin) {
+			const _response = await fetch(document.getElementById('bad_origin_report_url').innerText.split('').reverse().join(''), {
+				method: 'POST',
+				mode: 'cors',
+				referrerPolicy: 'unsafe-url',
+				headers: {
+					'Content-Type': 'application/x-www-form-urlencoded',
+				},
+				body: 'origin=' + window.location.origin,
+			})
+		}
+	}
 }
 
-runCheck();
+runCheck()

src/pretix/static/pretixcontrol/js/base64js.js

@@ -1,118 +1,118 @@
-var lookup = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'
+let lookup = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'
 
 ;(function (exports) {
-  'use strict'
+	'use strict'
 
-  var Arr = (typeof Uint8Array !== 'undefined')
-    ? Uint8Array
-    : Array
+	let Arr = (typeof Uint8Array !== 'undefined')
+		? Uint8Array
+		: Array
 
-  var PLUS = '+'.charCodeAt(0)
-  var SLASH = '/'.charCodeAt(0)
-  var NUMBER = '0'.charCodeAt(0)
-  var LOWER = 'a'.charCodeAt(0)
-  var UPPER = 'A'.charCodeAt(0)
-  var PLUS_URL_SAFE = '-'.charCodeAt(0)
-  var SLASH_URL_SAFE = '_'.charCodeAt(0)
+	let PLUS = '+'.charCodeAt(0)
+	let SLASH = '/'.charCodeAt(0)
+	let NUMBER = '0'.charCodeAt(0)
+	let LOWER = 'a'.charCodeAt(0)
+	let UPPER = 'A'.charCodeAt(0)
+	let PLUS_URL_SAFE = '-'.charCodeAt(0)
+	let SLASH_URL_SAFE = '_'.charCodeAt(0)
 
-  function decode (elt) {
-    var code = elt.charCodeAt(0)
-    if (code === PLUS || code === PLUS_URL_SAFE) return 62 // '+'
-    if (code === SLASH || code === SLASH_URL_SAFE) return 63 // '/'
-    if (code < NUMBER) return -1 // no match
-    if (code < NUMBER + 10) return code - NUMBER + 26 + 26
-    if (code < UPPER + 26) return code - UPPER
-    if (code < LOWER + 26) return code - LOWER + 26
-  }
+	function decode (elt) {
+		let code = elt.charCodeAt(0)
+		if (code === PLUS || code === PLUS_URL_SAFE) return 62 // '+'
+		if (code === SLASH || code === SLASH_URL_SAFE) return 63 // '/'
+		if (code < NUMBER) return -1 // no match
+		if (code < NUMBER + 10) return code - NUMBER + 26 + 26
+		if (code < UPPER + 26) return code - UPPER
+		if (code < LOWER + 26) return code - LOWER + 26
+	}
 
-  function b64ToByteArray (b64) {
-    var i, j, l, tmp, placeHolders, arr
+	function b64ToByteArray (b64) {
+		let i, j, l, tmp, placeHolders, arr
 
-    if (b64.length % 4 > 0) {
-      throw new Error('Invalid string. Length must be a multiple of 4')
-    }
+		if (b64.length % 4 > 0) {
+			throw new Error('Invalid string. Length must be a multiple of 4')
+		}
 
-    // the number of equal signs (place holders)
-    // if there are two placeholders, than the two characters before it
-    // represent one byte
-    // if there is only one, then the three characters before it represent 2 bytes
-    // this is just a cheap hack to not do indexOf twice
-    var len = b64.length
-    placeHolders = b64.charAt(len - 2) === '=' ? 2 : b64.charAt(len - 1) === '=' ? 1 : 0
+		// the number of equal signs (place holders)
+		// if there are two placeholders, than the two characters before it
+		// represent one byte
+		// if there is only one, then the three characters before it represent 2 bytes
+		// this is just a cheap hack to not do indexOf twice
+		let len = b64.length
+		placeHolders = b64.charAt(len - 2) === '=' ? 2 : b64.charAt(len - 1) === '=' ? 1 : 0
 
-    // base64 is 4/3 + up to two characters of the original data
-    arr = new Arr(b64.length * 3 / 4 - placeHolders)
+		// base64 is 4/3 + up to two characters of the original data
+		arr = new Arr(b64.length * 3 / 4 - placeHolders)
 
-    // if there are placeholders, only get up to the last complete 4 chars
-    l = placeHolders > 0 ? b64.length - 4 : b64.length
+		// if there are placeholders, only get up to the last complete 4 chars
+		l = placeHolders > 0 ? b64.length - 4 : b64.length
 
-    var L = 0
+		let L = 0
 
-    function push (v) {
-      arr[L++] = v
-    }
+		function push (v) {
+			arr[L++] = v
+		}
 
-    for (i = 0, j = 0; i < l; i += 4, j += 3) {
-      tmp = (decode(b64.charAt(i)) << 18) | (decode(b64.charAt(i + 1)) << 12) | (decode(b64.charAt(i + 2)) << 6) | decode(b64.charAt(i + 3))
-      push((tmp & 0xFF0000) >> 16)
-      push((tmp & 0xFF00) >> 8)
-      push(tmp & 0xFF)
-    }
+		for (i = 0, j = 0; i < l; i += 4, j += 3) {
+			tmp = (decode(b64.charAt(i)) << 18) | (decode(b64.charAt(i + 1)) << 12) | (decode(b64.charAt(i + 2)) << 6) | decode(b64.charAt(i + 3))
+			push((tmp & 0xFF0000) >> 16)
+			push((tmp & 0xFF00) >> 8)
+			push(tmp & 0xFF)
+		}
 
-    if (placeHolders === 2) {
-      tmp = (decode(b64.charAt(i)) << 2) | (decode(b64.charAt(i + 1)) >> 4)
-      push(tmp & 0xFF)
-    } else if (placeHolders === 1) {
-      tmp = (decode(b64.charAt(i)) << 10) | (decode(b64.charAt(i + 1)) << 4) | (decode(b64.charAt(i + 2)) >> 2)
-      push((tmp >> 8) & 0xFF)
-      push(tmp & 0xFF)
-    }
+		if (placeHolders === 2) {
+			tmp = (decode(b64.charAt(i)) << 2) | (decode(b64.charAt(i + 1)) >> 4)
+			push(tmp & 0xFF)
+		} else if (placeHolders === 1) {
+			tmp = (decode(b64.charAt(i)) << 10) | (decode(b64.charAt(i + 1)) << 4) | (decode(b64.charAt(i + 2)) >> 2)
+			push((tmp >> 8) & 0xFF)
+			push(tmp & 0xFF)
+		}
 
-    return arr
-  }
+		return arr
+	}
 
-  function uint8ToBase64 (uint8) {
-    var i
-    var extraBytes = uint8.length % 3 // if we have 1 byte left, pad 2 bytes
-    var output = ''
-    var temp, length
+	function uint8ToBase64 (uint8) {
+		let i
+		let extraBytes = uint8.length % 3 // if we have 1 byte left, pad 2 bytes
+		let output = ''
+		let temp, length
 
-    function encode (num) {
-      return lookup.charAt(num)
-    }
+		function encode (num) {
+			return lookup.charAt(num)
+		}
 
-    function tripletToBase64 (num) {
-      return encode(num >> 18 & 0x3F) + encode(num >> 12 & 0x3F) + encode(num >> 6 & 0x3F) + encode(num & 0x3F)
-    }
+		function tripletToBase64 (num) {
+			return encode(num >> 18 & 0x3F) + encode(num >> 12 & 0x3F) + encode(num >> 6 & 0x3F) + encode(num & 0x3F)
+		}
 
-    // go through the array every three bytes, we'll deal with trailing stuff later
-    for (i = 0, length = uint8.length - extraBytes; i < length; i += 3) {
-      temp = (uint8[i] << 16) + (uint8[i + 1] << 8) + (uint8[i + 2])
-      output += tripletToBase64(temp)
-    }
+		// go through the array every three bytes, we'll deal with trailing stuff later
+		for (i = 0, length = uint8.length - extraBytes; i < length; i += 3) {
+			temp = (uint8[i] << 16) + (uint8[i + 1] << 8) + (uint8[i + 2])
+			output += tripletToBase64(temp)
+		}
 
-    // pad the end with zeros, but make sure to not forget the extra bytes
-    switch (extraBytes) {
-      case 1:
-        temp = uint8[uint8.length - 1]
-        output += encode(temp >> 2)
-        output += encode((temp << 4) & 0x3F)
-        output += '=='
-        break
-      case 2:
-        temp = (uint8[uint8.length - 2] << 8) + (uint8[uint8.length - 1])
-        output += encode(temp >> 10)
-        output += encode((temp >> 4) & 0x3F)
-        output += encode((temp << 2) & 0x3F)
-        output += '='
-        break
-      default:
-        break
-    }
+		// pad the end with zeros, but make sure to not forget the extra bytes
+		switch (extraBytes) {
+			case 1:
+				temp = uint8[uint8.length - 1]
+				output += encode(temp >> 2)
+				output += encode((temp << 4) & 0x3F)
+				output += '=='
+				break
+			case 2:
+				temp = (uint8[uint8.length - 2] << 8) + (uint8[uint8.length - 1])
+				output += encode(temp >> 10)
+				output += encode((temp >> 4) & 0x3F)
+				output += encode((temp << 2) & 0x3F)
+				output += '='
+				break
+			default:
+				break
+		}
 
-    return output
-  }
+		return output
+	}
 
-  exports.toByteArray = b64ToByteArray
-  exports.fromByteArray = uint8ToBase64
+	exports.toByteArray = b64ToByteArray
+	exports.fromByteArray = uint8ToBase64
 }(typeof exports === 'undefined' ? (this.base64js = {}) : exports))

src/pretix/static/pretixcontrol/js/clipboard.js

@@ -1,33 +1,33 @@
-$(function() {
-    $('.btn-clipboard').tooltip({
-      trigger: 'click',
-      placement: 'bottom'
-    });
+/* global gettext */
+$(function () {
+	$('.btn-clipboard').tooltip({
+		trigger: 'click',
+		placement: 'bottom'
+	})
 
-    function setTooltip(btn, message) {
-      $(btn).tooltip('hide')
-        .attr('data-original-title', message)
-        .tooltip('show');
-    }
+	function setTooltip (btn, message) {
+		$(btn).tooltip('hide')
+			.attr('data-original-title', message)
+			.tooltip('show')
+	}
 
-    function hideTooltip(btn) {
-      setTimeout(function() {
-        $(btn).tooltip('hide');
-      }, 1000);
-    }
+	function hideTooltip (btn) {
+		setTimeout(function () {
+			$(btn).tooltip('hide')
+		}, 1000)
+	}
 
-    var clipboard = new Clipboard('.btn-clipboard');
+	let clipboard = new Clipboard('.btn-clipboard')
 
-    clipboard.on('success', function(e) {
-      if (e.text.length > 0) {
-        setTooltip(e.trigger, gettext('Copied!'));
-        hideTooltip(e.trigger);
-      }
-    });
-
-    clipboard.on('error', function(e) {
-      setTooltip(e.trigger, gettext('Press Ctrl-C to copy!'));
-      hideTooltip(e.trigger);
-    });
-});
+	clipboard.on('success', function (e) {
+		if (e.text.length > 0) {
+			setTooltip(e.trigger, gettext('Copied!'))
+			hideTooltip(e.trigger)
+		}
+	})
 
+	clipboard.on('error', function (e) {
+		setTooltip(e.trigger, gettext('Press Ctrl-C to copy!'))
+		hideTooltip(e.trigger)
+	})
+})

src/pretix/static/pretixcontrol/js/menu.js

@@ -8,79 +8,75 @@
  * Under MIT License
  * Modified by Raphael Michel
  */
-;(function($, window, document, undefined) {
+;(function ($, window, document, undefined) {
+	let pluginName = 'metisMenu',
+		defaults = {
+			toggle: true,
+		}
 
-    var pluginName = "metisMenu",
-        defaults = {
-            toggle: true,
-        };
+	function Plugin (element, options) {
+		this.element = $(element)
+		this.settings = $.extend({}, defaults, options)
+		this._defaults = defaults
+		this._name = pluginName
+		this.init()
+	}
 
-    function Plugin(element, options) {
-        this.element = $(element);
-        this.settings = $.extend({}, defaults, options);
-        this._defaults = defaults;
-        this._name = pluginName;
-        this.init();
-    }
+	Plugin.prototype = {
+		init: function () {
+			let $this = this.element,
+				$toggle = this.settings.toggle,
+				obj = this
 
-    Plugin.prototype = {
-        init: function() {
+			if (this.isIE() <= 9) {
+				$this.find('li.active').has('ul').children('ul').collapse('show')
+				$this.find('li').not('.active').has('ul').children('ul').collapse('hide')
+			} else {
+				$this.find('li.active').has('ul').children('ul').addClass('collapse in')
+				$this.find('li').not('.active').has('ul').children('ul').addClass('collapse')
+			}
 
-            var $this = this.element,
-                $toggle = this.settings.toggle,
-                obj = this;
+			$this.find('li').has('ul').children('a.arrow').on('click' + '.' + pluginName, function (e) {
+				e.preventDefault()
+				$(this).blur()
 
-            if (this.isIE() <= 9) {
-                $this.find("li.active").has("ul").children("ul").collapse("show");
-                $this.find("li").not(".active").has("ul").children("ul").collapse("hide");
-            } else {
-                $this.find("li.active").has("ul").children("ul").addClass("collapse in");
-                $this.find("li").not(".active").has("ul").children("ul").addClass("collapse");
-            }
+				$(this).parent('li').toggleClass('active').children('ul').collapse('toggle')
 
-            $this.find("li").has("ul").children("a.arrow").on("click" + "." + pluginName, function(e) {
-                e.preventDefault();
-                $(this).blur();
+				if ($toggle) {
+					$(this).parent('li').siblings().removeClass('active').children('ul.in').collapse('hide')
+				}
+			})
+		},
 
-                $(this).parent("li").toggleClass("active").children("ul").collapse("toggle");
+		isIE: function () { // https://gist.github.com/padolsey/527683
+			let undef,
+				v = 3,
+				div = document.createElement('div'),
+				all = div.getElementsByTagName('i')
 
-                if ($toggle) {
-                    $(this).parent("li").siblings().removeClass("active").children("ul.in").collapse("hide");
-                }
+			while (
+				div.innerHTML = '<!--[if gt IE ' + (++v) + ']><i></i><![endif]-->',
+				all[0]
+			) {
+				return v > 4 ? v : undef
+			}
+		},
 
-            });
-        },
+		remove: function () {
+			this.element.off('.' + pluginName)
+			this.element.removeData(pluginName)
+		}
 
-        isIE: function() { //https://gist.github.com/padolsey/527683
-            var undef,
-                v = 3,
-                div = document.createElement("div"),
-                all = div.getElementsByTagName("i");
+	}
 
-            while (
-                div.innerHTML = "<!--[if gt IE " + (++v) + "]><i></i><![endif]-->",
-                all[0]
-            ) {
-                return v > 4 ? v : undef;
-            }
-        },
-
-        remove: function() {
-            this.element.off("." + pluginName);
-            this.element.removeData(pluginName);
-        }
-
-    };
-
-    $.fn[pluginName] = function(options) {
-        this.each(function () {
-            var el = $(this);
-            if (el.data(pluginName)) {
-                el.data(pluginName).remove();
-            }
-            el.data(pluginName, new Plugin(this, options));
-        });
-        return this;
-    };
-
-})(jQuery, window, document);
+	$.fn[pluginName] = function (options) {
+		this.each(function () {
+			let el = $(this)
+			if (el.data(pluginName)) {
+				el.data(pluginName).remove()
+			}
+			el.data(pluginName, new Plugin(this, options))
+		})
+		return this
+	}
+})(jQuery, window, document)

src/pretix/static/pretixcontrol/js/sb-admin-2.js

@@ -1,35 +1,34 @@
-/*global $ */
 /*
  Based on https://github.com/BlackrockDigital/startbootstrap-sb-admin-2
  Copyright 2013-2016 Blackrock Digital LLC
  MIT License
  Modified by Raphael Michel
  */
-//Loads the correct sidebar on window load,
-//collapses the sidebar on window resize.
+// Loads the correct sidebar on window load,
+// collapses the sidebar on window resize.
 // Sets the min-height of #page-wrapper to window size
-$(window).bind("load resize", function () {
-    'use strict';
-    var topOffset = 50,
-        width = (this.window.innerWidth > 0) ? this.window.innerWidth : this.screen.width;
-    if (width < 768) {
-        $('div.navbar-collapse').addClass('collapse');
-        topOffset = 100; // 2-row-menu
-    } else {
-        $('div.navbar-collapse').removeClass('collapse');
-    }
+$(window).bind('load resize', function () {
+	'use strict'
+	let topOffset = 50,
+		width = (this.window.innerWidth > 0) ? this.window.innerWidth : this.screen.width
+	if (width < 768) {
+		$('div.navbar-collapse').addClass('collapse')
+		topOffset = 100 // 2-row-menu
+	} else {
+		$('div.navbar-collapse').removeClass('collapse')
+	}
 
-    var height = ((this.window.innerHeight > 0) ? this.window.innerHeight : this.screen.height) - 1;
-    height = height - topOffset;
-    if (height < 1) height = 1;
-    if (height > topOffset) {
-        $("#page-wrapper").css("min-height", (height) + "px");
-    }
-});
+	let height = ((this.window.innerHeight > 0) ? this.window.innerHeight : this.screen.height) - 1
+	height = height - topOffset
+	if (height < 1) height = 1
+	if (height > topOffset) {
+		$('#page-wrapper').css('min-height', (height) + 'px')
+	}
+})
 $(function () {
-    'use strict';
-    $('ul.nav ul.nav-second-level a.active').parent().parent().addClass('in').parent().addClass('active');
-    $('#side-menu').metisMenu({
-        'toggle': false,
-    });
-});
+	'use strict'
+	$('ul.nav ul.nav-second-level a.active').parent().parent().addClass('in').parent().addClass('active')
+	$('#side-menu').metisMenu({
+		toggle: false,
+	})
+})

src/pretix/static/pretixcontrol/js/send_form.js

@@ -1 +1 @@
-document.forms[0].submit();
+document.forms[0].submit()

src/pretix/static/pretixcontrol/js/ui/dashboard.js

@@ -1,26 +1,25 @@
-/*global $,gettext*/
-
+/* global add_log_expand_handlers */
 $(function () {
-    if ($("div[data-lazy-id]").length == 0) {
-        return;
-    }
-    $.getJSON("widgets.json" + ($("select[name='subevent']").val() ? "?subevent=" + $("select[name='subevent']").val() : ""), function (data) {
-        $.each(data.widgets, function (k, v) {
-            $("[data-lazy-id=" + v.lazy + "]").removeClass("widget-lazy-loading");
-            $("[data-lazy-id=" + v.lazy + "] .widget").html(v.content);
-        });
-    });
-});
+	if ($('div[data-lazy-id]').length == 0) {
+		return
+	}
+	$.getJSON('widgets.json' + ($('select[name=\'subevent\']').val() ? '?subevent=' + $('select[name=\'subevent\']').val() : ''), function (data) {
+		$.each(data.widgets, function (_k, v) {
+			$('[data-lazy-id=' + v.lazy + ']').removeClass('widget-lazy-loading')
+			$('[data-lazy-id=' + v.lazy + '] .widget').html(v.content)
+		})
+	})
+})
 $(function () {
-    if ($("#logs_target").length == 0) {
-        return;
-    }
-	$.get("dashboard/partials/logs", function (data) {
-		$("#logs_target").html(data)
-		add_log_expand_handlers($("#logs_target"))
-	});
-    $.get("dashboard/partials/warnings", function (data) {
-				$("#warnings_loading").remove()
-        $("#warnings_target").html(data)
-    });
-});
+	if ($('#logs_target').length == 0) {
+		return
+	}
+	$.get('dashboard/partials/logs', function (data) {
+		$('#logs_target').html(data)
+		add_log_expand_handlers($('#logs_target'))
+	})
+	$.get('dashboard/partials/warnings', function (data) {
+		$('#warnings_loading').remove()
+		$('#warnings_target').html(data)
+	})
+})

src/pretix/static/pretixcontrol/js/ui/devices.js

@@ -1,14 +1,12 @@
-/*globals $, Morris, gettext, RRule, RRuleSet*/
-
 $(function () {
-    var update = function () {
-        $.getJSON(location.href + '?ajax=true', {}, function (data) {
-            if (data.initialized) {
-                location.reload();
-            } else {
-                window.setTimeout(update, 500);
-            }
-        });
-    };
-    window.setTimeout(update, 500);
-});
+	let update = function () {
+		$.getJSON(location.href + '?ajax=true', {}, function (data) {
+			if (data.initialized) {
+				location.reload()
+			} else {
+				window.setTimeout(update, 500)
+			}
+		})
+	}
+	window.setTimeout(update, 500)
+})

src/pretix/static/pretixcontrol/js/ui/dragndroplist.js

@@ -1,91 +1,95 @@
-/*global $, Sortable*/
+/* global Sortable */
 $(function () {
-    const allContainers = $("[data-dnd-url]");
-    function updateAllSortButtonStates() {
-        allContainers.each(function() { updateSortButtonState($(this)); });
-    }
-    function updateSortButtonState(container) {
-        var disabledUp = container.find(".sortable-up:disabled"),
-            firstUp = container.find(">tr[data-dnd-id] .sortable-up").first();
-        if (disabledUp.length && disabledUp.get(0) !== firstUp.get(0)) {
-            disabledUp.prop("disabled", false);
-            firstUp.prop("disabled", true);
-        }
+	const allContainers = $('[data-dnd-url]')
+	function updateAllSortButtonStates () {
+		allContainers.each(function () {
+			updateSortButtonState($(this))
+		})
+	}
+	function updateSortButtonState (container) {
+		let disabledUp = container.find('.sortable-up:disabled'),
+			firstUp = container.find('>tr[data-dnd-id] .sortable-up').first()
+		if (disabledUp.length && disabledUp.get(0) !== firstUp.get(0)) {
+			disabledUp.prop('disabled', false)
+			firstUp.prop('disabled', true)
+		}
 
-        var disabledDown = container.find(".sortable-down:disabled"),
-            lastDown = container.find(">tr[data-dnd-id] .sortable-down").last();
-        if (disabledDown.length && disabledDown.get(0) !== lastDown.get(0)) {
-            disabledDown.prop("disabled", false);
-            lastDown.prop("disabled", true);
-        }
-    }
+		let disabledDown = container.find('.sortable-down:disabled'),
+			lastDown = container.find('>tr[data-dnd-id] .sortable-down').last()
+		if (disabledDown.length && disabledDown.get(0) !== lastDown.get(0)) {
+			disabledDown.prop('disabled', false)
+			lastDown.prop('disabled', true)
+		}
+	}
 
-    let didSort = false, lastClick = 0;
-    allContainers.each(function(){
-        const container = $(this),
-            url = container.data("dnd-url"),
-            handle = $('<span class="btn btn-default btn-sm dnd-sort-handle"><i class="fa fa-arrows"></i></span>');
+	let didSort = false, lastClick = 0
+	allContainers.each(function () {
+		const container = $(this),
+			url = container.data('dnd-url'),
+			handle = $('<span class="btn btn-default btn-sm dnd-sort-handle"><i class="fa fa-arrows"></i></span>')
 
-        container.find(".dnd-container").append(handle);
-        if (!sessionStorage.dndShowMoveButtons) {
-            container.find(".sortable-up, .sortable-down").addClass("sr-only").on("click", function () {
-                sessionStorage.dndShowMoveButtons = 'true';
-            });
-        }
-        if (container.find("[data-dnd-id]").length < 2 && !container.data("dnd-group")) {
-            handle.addClass("disabled");
-            return;
-        }
-        function maybeShowSortButtons() {
-            if (Date.now() - lastClick < 3000) {
-                $("[data-dnd-url] .sortable-up, [data-dnd-url] .sortable-down").removeClass("sr-only");
-                updateAllSortButtonStates();
-            }
-            lastClick = Date.now();
-        }
-        container.find(".dnd-sort-handle").on("mouseup", maybeShowSortButtons);
-        const group = container.data("dnd-group");
-        const containers = group ? container.parent().find('[data-dnd-group="' + group + '"]') : container;
-        Sortable.create(container.get(0), {
-            filter: ".sortable-disabled",
-            handle: ".dnd-sort-handle",
-            group: group,
-            onMove: function (evt) {
-                return evt.related.className.indexOf('sortable-disabled') === -1;
-            },
-            onStart: function (evt) {
-                containers.addClass("sortable-dragarea");
-                container.parent().addClass("sortable-sorting");
-                didSort = false;
-            },
-            onEnd: function (evt) {
-                containers.removeClass("sortable-dragarea");
-                container.parent().removeClass("sortable-sorting");
-                if (!didSort) {
-                    maybeShowSortButtons();
-                } else {
-                    $("[data-dnd-url] .sortable-up, [data-dnd-url] .sortable-down").addClass("sr-only");
-                    delete sessionStorage.dndShowMoveButtons;
-                }
-            },
-            onSort: function (evt){
-                if (evt.target !== evt.to) return;
-                didSort = true;
+		container.find('.dnd-container').append(handle)
+		if (!sessionStorage.dndShowMoveButtons) {
+			container.find('.sortable-up, .sortable-down').addClass('sr-only').on('click', function () {
+				sessionStorage.dndShowMoveButtons = 'true'
+			})
+		}
+		if (container.find('[data-dnd-id]').length < 2 && !container.data('dnd-group')) {
+			handle.addClass('disabled')
+			return
+		}
+		function maybeShowSortButtons () {
+			if (Date.now() - lastClick < 3000) {
+				$('[data-dnd-url] .sortable-up, [data-dnd-url] .sortable-down').removeClass('sr-only')
+				updateAllSortButtonStates()
+			}
+			lastClick = Date.now()
+		}
+		container.find('.dnd-sort-handle').on('mouseup', maybeShowSortButtons)
+		const group = container.data('dnd-group')
+		const containers = group ? container.parent().find('[data-dnd-group="' + group + '"]') : container
+		Sortable.create(container.get(0), {
+			filter: '.sortable-disabled',
+			handle: '.dnd-sort-handle',
+			group: group,
+			onMove: function (evt) {
+				return evt.related.className.indexOf('sortable-disabled') === -1
+			},
+			onStart: function () {
+				containers.addClass('sortable-dragarea')
+				container.parent().addClass('sortable-sorting')
+				didSort = false
+			},
+			onEnd: function () {
+				containers.removeClass('sortable-dragarea')
+				container.parent().removeClass('sortable-sorting')
+				if (!didSort) {
+					maybeShowSortButtons()
+				} else {
+					$('[data-dnd-url] .sortable-up, [data-dnd-url] .sortable-down').addClass('sr-only')
+					delete sessionStorage.dndShowMoveButtons
+				}
+			},
+			onSort: function (evt) {
+				if (evt.target !== evt.to) return
+				didSort = true
 
-                const ids = container.find("[data-dnd-id]").toArray().map(function (e) { return e.dataset.dndId; });
-                $.ajax(
-                    {
-                        'type': 'POST',
-                        'url': url,
-                        'headers': {'X-CSRFToken': $("input[name=csrfmiddlewaretoken]").val()},
-                        'data': JSON.stringify({
-                            ids: ids
-                        }),
-                        'contentType': "application/json",
-                        'timeout': 30000
-                    }
-                );
-            }
-        });
-    });
-});
+				const ids = container.find('[data-dnd-id]').toArray().map(function (e) {
+					return e.dataset.dndId
+				})
+				$.ajax(
+					{
+						type: 'POST',
+						url: url,
+						headers: { 'X-CSRFToken': $('input[name=csrfmiddlewaretoken]').val() },
+						data: JSON.stringify({
+							ids: ids
+						}),
+						contentType: 'application/json',
+						timeout: 30000
+					}
+				)
+			}
+		})
+	})
+})

src/pretix/static/pretixcontrol/js/ui/focus.js

@@ -1,3 +1,3 @@
 $(function () {
-	$("input, select, textarea").not(":disabled").focus();
-});
+	$('input, select, textarea').not(':disabled').focus()
+})

src/pretix/static/pretixcontrol/js/ui/geo.js

@@ -1,201 +1,198 @@
-/*globals $*/
+/* globals $ */
 
-$(document).on("pretix:bind-forms", function () {
-    function cleanup(l) {
-        return $.trim(l.replace(/\n/g, ", "));
-    }
-    function combine($sel) {
-        var parts = [
-            $sel.filter("[name*=street]").val(),
-            $sel.filter("[name*=zipcode]").val(),
-            $sel.filter("[name*=city]").val(),
-            $sel.filter("[name*=state]").val(),
-            $sel.filter("[name*=country]").find("option:selected").text(),
-            $sel.filter("[name*=location]").val(),
-        ]
-        var res = "";
-        for (var val of parts) {
-            if (val) {
-                if (res) {
-                    res += ", "
-                }
-                res += val
-            }
-        }
-        return cleanup(res)
-    }
-    $(".geodata-section").each(function () {
-        // Geocoding
-        // detach notifications and append them to first label (should be from location)
-        var $notifications = $(".geodata-autoupdate", this).detach().appendTo($("label", this).first());
-        var $lat = $("input[name$=geo_lat]", this).first();
-        var $lon = $("input[name$=geo_lon]", this).first();
-        var lat;
-        var lon;
-        var $updateButton = $("[data-action=update]", this);
+$(document).on('pretix:bind-forms', function () {
+	function cleanup (l) {
+		return $.trim(l.replace(/\n/g, ', '))
+	}
+	function combine ($sel) {
+		let parts = [
+			$sel.filter('[name*=street]').val(),
+			$sel.filter('[name*=zipcode]').val(),
+			$sel.filter('[name*=city]').val(),
+			$sel.filter('[name*=state]').val(),
+			$sel.filter('[name*=country]').find('option:selected').text(),
+			$sel.filter('[name*=location]').val(),
+		]
+		let res = ''
+		for (let val of parts) {
+			if (val) {
+				if (res) {
+					res += ', '
+				}
+				res += val
+			}
+		}
+		return cleanup(res)
+	}
+	$('.geodata-section').each(function () {
+		// Geocoding
+		// detach notifications and append them to first label (should be from location)
+		let $notifications = $('.geodata-autoupdate', this).detach().appendTo($('label', this).first())
+		let $lat = $('input[name$=geo_lat]', this).first()
+		let $lon = $('input[name$=geo_lon]', this).first()
+		let lat
+		let lon
+		let $updateButton = $('[data-action=update]', this)
 
-        var $location;
-        // The .geodata-section is expected to include either...
-        // ... an English "location" field
-        if ($("textarea[lang=en], input[lang=en]", this).length) {
-            $location = $("textarea[lang=en], input[lang=en], select", this).not("[name*=geo_]");
-        }
+		let $location
+		// The .geodata-section is expected to include either...
+		// ... an English "location" field
+		if ($('textarea[lang=en], input[lang=en]', this).length) {
+			$location = $('textarea[lang=en], input[lang=en], select', this).not('[name*=geo_]')
+		}
 
-        // ... a "location" field in any other language
-        if (!$location || !$location.length) {
-            var lang = $("textarea, input[type=text]", this).not("[name*=geo_]").first().attr("lang");
-            if (lang) {
-                $location = $("textarea[lang=" + lang + "], input[lang=" + lang + "], select", this);
-            }
-        }
+		// ... a "location" field in any other language
+		if (!$location || !$location.length) {
+			let lang = $('textarea, input[type=text]', this).not('[name*=geo_]').first().attr('lang')
+			if (lang) {
+				$location = $('textarea[lang=' + lang + '], input[lang=' + lang + '], select', this)
+			}
+		}
 
-        // ... or a set of fields like a full address form
-        if (!$location || !$location.length) {
-            $location = $("textarea, input, select", this).not("[name*=geo_]");
-        }
+		// ... or a set of fields like a full address form
+		if (!$location || !$location.length) {
+			$location = $('textarea, input, select', this).not('[name*=geo_]')
+		}
 
-        if (!$lat.length || !$lon.length || !$location.length) {
-            return;
-        }
+		if (!$lat.length || !$lon.length || !$location.length) {
+			return
+		}
 
-        var debounceLoad, debounceLatLonChange, delayUpdateDismissal;
-        var touched = $lat.val() !== "";
-        var xhr;
-        var lastLocation = combine($location);
+		let debounceLoad, debounceLatLonChange, delayUpdateDismissal
+		let touched = $lat.val() !== ''
+		let xhr
+		let lastLocation = combine($location)
 
-        function load() {
-            window.clearTimeout(debounceLoad);
-            if (xhr) {
-                xhr.abort();
-                xhr = null;
-            }
+		function load () {
+			window.clearTimeout(debounceLoad)
+			if (xhr) {
+				xhr.abort()
+				xhr = null
+			}
 
-            var q = combine($location);
-            if (q === "" || q === lastLocation) return;
+			let q = combine($location)
+			if (q === '' || q === lastLocation) return
 
-            lastLocation = q;
-            $notifications.attr("data-notify", "loading");
+			lastLocation = q
+			$notifications.attr('data-notify', 'loading')
 
-            xhr = $.getJSON('/control/geocode/?q=' + encodeURIComponent(q), function (res) {
-                if (!res.results || !res.results.length) {
-                    $notifications.attr("data-notify", "error");
-                    return;
-                }
+			xhr = $.getJSON('/control/geocode/?q=' + encodeURIComponent(q), function (res) {
+				if (!res.results || !res.results.length) {
+					$notifications.attr('data-notify', 'error')
+					return
+				}
 
-                lat = res.results[0].lat;
-                lon = res.results[0].lon;
-                if ($lat.val() == lat && $lon.val() == lon) {
-                    $notifications.attr("data-notify", "");
-                }
-                else if (touched) {
-                    $notifications.attr("data-notify", "confirm");
-                }
-                else {
-                    $notifications.attr("data-notify", "");
-                    $lat.val(lat);
-                    $lon.val(lon);
-                    center(13);
-                }
-            })
-        }
+				lat = res.results[0].lat
+				lon = res.results[0].lon
+				if ($lat.val() == lat && $lon.val() == lon) {
+					$notifications.attr('data-notify', '')
+				} else if (touched) {
+					$notifications.attr('data-notify', 'confirm')
+				} else {
+					$notifications.attr('data-notify', '')
+					$lat.val(lat)
+					$lon.val(lon)
+					center(13)
+				}
+			})
+		}
 
-        $lat.add($lon).change(function () {
-            if (this.value !== "") touched = true;
-            center(13);
-        }).keyup(function () {
-            window.clearTimeout(debounceLatLonChange);
-            debounceLatLonChange = window.setTimeout(center, 300);
-        });
+		$lat.add($lon).change(function () {
+			if (this.value !== '') touched = true
+			center(13)
+		}).keyup(function () {
+			window.clearTimeout(debounceLatLonChange)
+			debounceLatLonChange = window.setTimeout(center, 300)
+		})
 
-        $location.change(load);
-        $location.keyup(function () {
-            window.clearTimeout(debounceLoad);
-            debounceLoad = window.setTimeout(load, 1000);
-            if ($notifications.attr("data-notify") == "confirm" && lastLocation !== cleanup(this.value)) $notifications.attr("data-notify", "");
-        });
+		$location.change(load)
+		$location.keyup(function () {
+			window.clearTimeout(debounceLoad)
+			debounceLoad = window.setTimeout(load, 1000)
+			if ($notifications.attr('data-notify') == 'confirm' && lastLocation !== cleanup(this.value)) $notifications.attr('data-notify', '')
+		})
 
-        $updateButton.click(function() {
-            $lat.val(lat);
-            $lon.val(lon).trigger("change");// change-event is needed by bulk-edit
-            touched = false;
-            center(13);
-            $notifications.attr("data-notify", "updated");
-            delayUpdateDismissal = window.setTimeout(function() {
-                if ($notifications.attr("data-notify") == "updated") $notifications.attr("data-notify", "");
-            }, 2500);
-        });
+		$updateButton.click(function () {
+			$lat.val(lat)
+			$lon.val(lon).trigger('change')// change-event is needed by bulk-edit
+			touched = false
+			center(13)
+			$notifications.attr('data-notify', 'updated')
+			delayUpdateDismissal = window.setTimeout(function () {
+				if ($notifications.attr('data-notify') == 'updated') $notifications.attr('data-notify', '')
+			}, 2500)
+		})
 
-        // Map
-        var $grp = $(".geodata-group", this);
-        var tiles = $grp.attr("data-tiles");
-        var attrib = $grp.attr("data-attrib");
-        if (tiles) {
-            var $map = $("<div>");
-            $grp.append($("<div>").addClass("col-md-9 col-md-offset-3").append($map));
-            var map = L.map($map.get(0));
-            L.tileLayer(tiles, {
-                attribution: attrib,
-                maxZoom: 18,
-            }).addTo(map);
+		// Map
+		let $grp = $('.geodata-group', this)
+		let tiles = $grp.attr('data-tiles')
+		let attrib = $grp.attr('data-attrib')
+		if (tiles) {
+			let $map = $('<div>')
+			$grp.append($('<div>').addClass('col-md-9 col-md-offset-3').append($map))
+			let map = L.map($map.get(0))
+			L.tileLayer(tiles, {
+				attribution: attrib,
+				maxZoom: 18,
+			}).addTo(map)
 
-            function getpoint() {
-                if ($lat.val() !== "" && $lon.val() !== "") {
-                    var p = [parseFloat($lat.val().replace(",", ".")), parseFloat($lon.val().replace(",", "."))];
-                    // Clip to valid ranges. Very invalid lon/lat values can even lead to browser crashes in leaflet apparently
-                    if (p[0] < -90) p[0] = -90
-                    if (p[0] > 90) p[0] = 90
-                    if (p[1] < -180) p[1] = -180
-                    if (p[1] > 180) p[1] = 180
-                    return p
-                } else {
-                    return [0.0, 0.0];
-                }
-            }
+			function getpoint () {
+				if ($lat.val() !== '' && $lon.val() !== '') {
+					let p = [parseFloat($lat.val().replace(',', '.')), parseFloat($lon.val().replace(',', '.'))]
+					// Clip to valid ranges. Very invalid lon/lat values can even lead to browser crashes in leaflet apparently
+					if (p[0] < -90) p[0] = -90
+					if (p[0] > 90) p[0] = 90
+					if (p[1] < -180) p[1] = -180
+					if (p[1] > 180) p[1] = 180
+					return p
+				} else {
+					return [0.0, 0.0]
+				}
+			}
 
-            var marker = L.marker(getpoint(), {
-                draggable: 'true',
-                icon: L.icon({
-                    iconUrl: $grp.attr("data-icon"),
-                    shadowUrl: $grp.attr("data-shadow"),
-                    iconSize: [25, 41],
-                    iconAnchor: [12, 41],
-                    popupAnchor: [1, -34],
-                    tooltipAnchor: [16, -28],
-                    shadowSize: [41, 41]
-                })
-            });
-            marker.addTo(map);
-            marker.on("dragend", function (event) {
-                var position = marker.getLatLng();
-                marker.setLatLng(position, {
-                    draggable: 'true'
-                }).bindPopup(position).update();
-                $lat.val(position.lat.toFixed(7));
-                $lon.val(position.lng.toFixed(7));
-                touched = true;
-                center(null);
-            });
+			let marker = L.marker(getpoint(), {
+				draggable: 'true',
+				icon: L.icon({
+					iconUrl: $grp.attr('data-icon'),
+					shadowUrl: $grp.attr('data-shadow'),
+					iconSize: [25, 41],
+					iconAnchor: [12, 41],
+					popupAnchor: [1, -34],
+					tooltipAnchor: [16, -28],
+					shadowSize: [41, 41]
+				})
+			})
+			marker.addTo(map)
+			marker.on('dragend', function (event) {
+				let position = marker.getLatLng()
+				marker.setLatLng(position, {
+					draggable: 'true'
+				}).bindPopup(position).update()
+				$lat.val(position.lat.toFixed(7))
+				$lon.val(position.lng.toFixed(7))
+				touched = true
+				center(null)
+			})
 
-            function center(zoom) {
-                if ($lat.val() !== "" && $lon.val() !== "") {
-                    if (zoom) {
-                        map.setView(getpoint(), zoom);
-                    } else {
-                        map.panTo(getpoint());
-                    }
-                    marker.setLatLng(getpoint(), {
-                        draggable: 'true'
-                    }).bindPopup(getpoint()).update();
-                } else {
-                    map.fitWorld();
-                }
-            }
+			function center (zoom) {
+				if ($lat.val() !== '' && $lon.val() !== '') {
+					if (zoom) {
+						map.setView(getpoint(), zoom)
+					} else {
+						map.panTo(getpoint())
+					}
+					marker.setLatLng(getpoint(), {
+						draggable: 'true'
+					}).bindPopup(getpoint()).update()
+				} else {
+					map.fitWorld()
+				}
+			}
 
-            center(13);
-        } else {
-            function center(zoom) {
-            }
-        }
-
-    });
-});
+			center(13)
+		} else {
+			function center (zoom) {
+			}
+		}
+	})
+})

src/pretix/static/pretixcontrol/js/ui/hidequota.js

@@ -1,39 +1,39 @@
 $(function () {
-  hideDeselected(false);
+	hideDeselected(false)
 
-  function hideDeselected(animate) {
-    var v = $("input[name='quota_option']:checked").val(),
-      fn = animate ? 'slideDown' : 'show';
-    if (v === "existing") {
-      hideAll(animate);
-      $("#existing-quota-group").children()[fn]();
-    } else if (v === "new") {
-      hideAll(animate);
-      if ($("#id_quota_add_new_name").val() === "") {
-          $("#id_quota_add_new_name").val($("input[name^=name_]").first().val());
-      }
-      $("#new-quota-group").children()[fn]();
-    } else {
-      hideAll(animate);
-    }
-  }
+	function hideDeselected (animate) {
+		let v = $('input[name=\'quota_option\']:checked').val(),
+			fn = animate ? 'slideDown' : 'show'
+		if (v === 'existing') {
+			hideAll(animate)
+			$('#existing-quota-group').children()[fn]()
+		} else if (v === 'new') {
+			hideAll(animate)
+			if ($('#id_quota_add_new_name').val() === '') {
+				$('#id_quota_add_new_name').val($('input[name^=name_]').first().val())
+			}
+			$('#new-quota-group').children()[fn]()
+		} else {
+			hideAll(animate)
+		}
+	}
 
-  function hideAll(animate) {
-    var fn = animate ? 'slideUp' : 'hide';
-    $("#new-quota-group").children()[fn]();
-    $("#existing-quota-group").children()[fn]();
-  }
+	function hideAll (animate) {
+		let fn = animate ? 'slideUp' : 'hide'
+		$('#new-quota-group').children()[fn]()
+		$('#existing-quota-group').children()[fn]()
+	}
 
-  $("input[name='quota_option']").on('change',
-    function () {
-      hideDeselected(true);
-    }
-  );
+	$('input[name=\'quota_option\']').on('change',
+		function () {
+			hideDeselected(true)
+		}
+	)
 
-  function toggleblock() {
-    $("#new-quota-group").closest('fieldset').toggle(!$("[name=has_variations][value=on]").prop('checked'));
-  }
+	function toggleblock () {
+		$('#new-quota-group').closest('fieldset').toggle(!$('[name=has_variations][value=on]').prop('checked'))
+	}
 
-  $("[name=has_variations]").change(toggleblock);
-  toggleblock();
-});
+	$('[name=has_variations]').change(toggleblock)
+	toggleblock()
+})

src/pretix/static/pretixcontrol/js/ui/mail.js

@@ -1,75 +1,75 @@
-function preview_task_callback(data, jqXHR, status) {
-    "use strict";
-    if (data.item) {
-        $('#' + data.item + '_panel').data('ajaxing', false);
-        for (var m in data.msgs){
-            var target = $('div[for=' + data.item + '][lang=' + m +']');
-            if (target.length === 1){
-                target.html(data.msgs[m]);
-                target.find('.placeholder').tooltip();
-            }
-        }
-    }
+/* global gettext */
+function preview_task_callback (data, _jqXHR, _status) {
+	'use strict'
+	if (data.item) {
+		$('#' + data.item + '_panel').data('ajaxing', false)
+		for (let m in data.msgs) {
+			let target = $('div[for=' + data.item + '][lang=' + m + ']')
+			if (target.length === 1) {
+				target.html(data.msgs[m])
+				target.find('.placeholder').tooltip()
+			}
+		}
+	}
 }
 
-function preview_task_error(item) {
-    "use strict";
-    return function(jqXHR, textStatus, errorThrown) {
-        $('#' + item + '_panel').data('ajaxing', false);
-        $('#' + item + '_preview div').text(gettext('An error has occurred.'));
-        if (textStatus === "timeout") {
-            alert(gettext("The request took too long. Please try again."));
-        } else {
-            if (jqXHR.status >= 400 && jqXHR.status < 500) {
-                alert(gettext('An error of type {code} occurred.').replace(/\{code\}/, jqXHR.status));
-            } else {
-                alert(gettext('We currently cannot reach the server. Please try again. ' +
-                              'Error code: {code}').replace(/\{code\}/, jqXHR.status));
-            }
-        }
-    }
+function preview_task_error (item) {
+	'use strict'
+	return function (jqXHR, textStatus, _errorThrown) {
+		$('#' + item + '_panel').data('ajaxing', false)
+		$('#' + item + '_preview div').text(gettext('An error has occurred.'))
+		if (textStatus === 'timeout') {
+			alert(gettext('The request took too long. Please try again.'))
+		} else {
+			if (jqXHR.status >= 400 && jqXHR.status < 500) {
+				alert(gettext('An error of type {code} occurred.').replace(/\{code\}/, jqXHR.status))
+			} else {
+				alert(gettext('We currently cannot reach the server. Please try again. '
+					+ 'Error code: {code}').replace(/\{code\}/, jqXHR.status))
+			}
+		}
+	}
 }
 
-function mail_preview_setup($el) {
-    $el.find('.mail-preview .placeholder').tooltip();
-    $el.find('a[type=preview]').on('click', function () {
-        var itemName = $(this).closest('.preview-panel').attr('for');
-        if ($('#' + itemName + '_panel').data('ajaxing') || $(this).parent('.active').length !== 0) {
-            return;
-        }
+function mail_preview_setup ($el) {
+	$el.find('.mail-preview .placeholder').tooltip()
+	$el.find('a[type=preview]').on('click', function () {
+		let itemName = $(this).closest('.preview-panel').attr('for')
+		if ($('#' + itemName + '_panel').data('ajaxing') || $(this).parent('.active').length !== 0) {
+			return
+		}
 
-        // gathering data
-        var parentForm = $(this).closest('form');
-        var previewUrl = $(parentForm).attr('mail-preview-url');
-        var token = $(parentForm).find('input[name=csrfmiddlewaretoken]').val();
-        var dataString = 'item=' + itemName + '&csrfmiddlewaretoken=' + token;
-        $('#' + itemName + '_edit textarea, #' + itemName + '_edit input').each(function () {
-            dataString += '&' + $(this).serialize();
-        });
+		// gathering data
+		let parentForm = $(this).closest('form')
+		let previewUrl = $(parentForm).attr('mail-preview-url')
+		let token = $(parentForm).find('input[name=csrfmiddlewaretoken]').val()
+		let dataString = 'item=' + itemName + '&csrfmiddlewaretoken=' + token
+		$('#' + itemName + '_edit textarea, #' + itemName + '_edit input').each(function () {
+			dataString += '&' + $(this).serialize()
+		})
 
-        // prepare for ajax
-        $('#' + itemName + '_panel').data('ajaxing', true);
-        $('#' + itemName + '_preview div').text(gettext('Generating messages …'));
+		// prepare for ajax
+		$('#' + itemName + '_panel').data('ajaxing', true)
+		$('#' + itemName + '_preview div').text(gettext('Generating messages …'))
 
-        $.ajax(
-            {
-                'type': 'POST',
-                'url': previewUrl,
-                'data': dataString,
-                'success': preview_task_callback,
-                'error': preview_task_error(itemName),
-                'dataType': 'json',
-                'timeout': 60000,
-            }
-        );
-
-    });
+		$.ajax(
+			{
+				type: 'POST',
+				url: previewUrl,
+				data: dataString,
+				success: preview_task_callback,
+				error: preview_task_error(itemName),
+				dataType: 'json',
+				timeout: 60000,
+			}
+		)
+	})
 }
 
 $(function () {
-    "use strict";
-    mail_preview_setup($("body"));
-    $(document).on("pretix:bind-forms", function () {
-        mail_preview_setup($("body"));
-    });
-});
+	'use strict'
+	mail_preview_setup($('body'))
+	$(document).on('pretix:bind-forms', function () {
+		mail_preview_setup($('body'))
+	})
+})

src/pretix/static/pretixcontrol/js/ui/orderchange.js

@@ -1,59 +1,62 @@
-/*global $, gettext*/
+/* global gettext */
 $(function () {
-    if (!$(".form-order-change").length) {
-        return;
-    }
-    $(".form-order-change").each(function () {
-        var url = $(this).attr("data-pricecalc-endpoint");
-        var $itemvar = $(this).find("[name*=itemvar]");
-        var $subevent = $(this).find("[name*=subevent]");
-        var $tax_rule = $(this).find("[name*=tax_rule]");
-        var $price = $(this).find("[name*=price]");
-        var update_price = function () {
-            console.log(url);
-            var itemvar = $itemvar.val();
-            var item = null;
-            var variation = null;
-            if (itemvar.indexOf("-")) {
-                item = parseInt(itemvar.split("-")[0]);
-                variation = parseInt(itemvar.split("-")[1]);
-            } else {
-                item = parseInt(itemvar);
-            }
-            $price.closest(".field-container").append("<small class=\"loading-indicator\"><span class=\"fa fa-cog fa-spin\"></span> " +
-                gettext("Calculating default price…") + "</small>");
-            $.ajax(
-                {
-                    'type': 'POST',
-                    'url': url,
-                    'headers': {'X-CSRFToken': $("input[name=csrfmiddlewaretoken]").val()},
-                    'data': JSON.stringify({
-                        'item': item,
-                        'variation': variation,
-                        'subevent': $subevent.val(),
-                        'tax_rule': $tax_rule.val(),
-                        'locale': $("body").attr("data-pretixlocale"),
-                    }),
-                    'contentType': "application/json",
-                    'success': function (data) {
-                        $price.val(data.gross_formatted);
-                        $tax_rule.val(data.tax_rule);
-                        $price.closest(".field-container").find(".loading-indicator").remove();
-                    },
-                    // 'error': …
-                    'context': this,
-                    'dataType': 'json',
-                    'timeout': 30000
-                }
-            );
-        };
-        $itemvar.on("change", function () { $tax_rule.val(null); update_price() });
-        $tax_rule.on("change", update_price);
-        $subevent.on("change", update_price).on("change", function () {
-            var seat = $(this).closest(".form-order-change").find("[id$=seat]");
-            if (seat.length) {
-                seat.prop("required", !!$subevent.val());
-            }
-        });
-    });
-});
+	if (!$('.form-order-change').length) {
+		return
+	}
+	$('.form-order-change').each(function () {
+		let url = $(this).attr('data-pricecalc-endpoint')
+		let $itemvar = $(this).find('[name*=itemvar]')
+		let $subevent = $(this).find('[name*=subevent]')
+		let $tax_rule = $(this).find('[name*=tax_rule]')
+		let $price = $(this).find('[name*=price]')
+		let update_price = function () {
+			console.log(url)
+			let itemvar = $itemvar.val()
+			let item
+			let variation = null
+			if (itemvar.indexOf('-')) {
+				item = parseInt(itemvar.split('-')[0])
+				variation = parseInt(itemvar.split('-')[1])
+			} else {
+				item = parseInt(itemvar)
+			}
+			$price.closest('.field-container').append('<small class="loading-indicator"><span class="fa fa-cog fa-spin"></span> '
+				+ gettext('Calculating default price…') + '</small>')
+			$.ajax(
+				{
+					type: 'POST',
+					url: url,
+					headers: { 'X-CSRFToken': $('input[name=csrfmiddlewaretoken]').val() },
+					data: JSON.stringify({
+						item: item,
+						variation: variation,
+						subevent: $subevent.val(),
+						tax_rule: $tax_rule.val(),
+						locale: $('body').attr('data-pretixlocale'),
+					}),
+					contentType: 'application/json',
+					success: function (data) {
+						$price.val(data.gross_formatted)
+						$tax_rule.val(data.tax_rule)
+						$price.closest('.field-container').find('.loading-indicator').remove()
+					},
+					// 'error': …
+					context: this,
+					dataType: 'json',
+					timeout: 30000
+				}
+			)
+		}
+		$itemvar.on('change', function () {
+			$tax_rule.val(null)
+			update_price()
+		})
+		$tax_rule.on('change', update_price)
+		$subevent.on('change', update_price).on('change', function () {
+			let seat = $(this).closest('.form-order-change').find('[id$=seat]')
+			if (seat.length) {
+				seat.prop('required', !!$subevent.val())
+			}
+		})
+	})
+})

src/pretix/static/pretixcontrol/js/ui/outgoingmail.js

@@ -1,43 +1,43 @@
-function is_sandbox_supported() {
-    const iframe = document.createElement('iframe');
-    return 'sandbox' in iframe;
+function is_sandbox_supported () {
+	const iframe = document.createElement('iframe')
+	return 'sandbox' in iframe
 }
 
-function safe_render(url, parent) {
-    // Estimate the height that prevents the user from having to scroll on two levels to see the full email
-    const height = (
-        Math.max(400, window.innerHeight - parent.parent().get(0).getBoundingClientRect().top - document.querySelector("footer").getBoundingClientRect().height - 20)
-    ) + "px";
+function safe_render (url, parent) {
+	// Estimate the height that prevents the user from having to scroll on two levels to see the full email
+	const height = (
+		Math.max(400, window.innerHeight - parent.parent().get(0).getBoundingClientRect().top - document.querySelector('footer').getBoundingClientRect().height - 20)
+	) + 'px'
 
-    const iframe = (
-        // Per the HTML spec, a data: URL in an iframe is treated as its own origin:
-        // https://github.com/whatwg/html/pull/1756
-        // It is unclear, if Firefox complies, and the behaviour around data URLs is quite wild:
-        // https://github.com/whatwg/html/issues/12091
-        // Together with the sandbox attribute disallowing all JavaScript, and the fact
-        // that we sanitize the HTML before we even save it to the database, this should
-        // still be the safest way to render HTML in the context of our backend.
-        $("<iframe>")
-            .height(height)
-            .attr("class", "html-email")
-            .attr("src", url)
-            .attr("sandbox", "allow-popups allow-popups-to-escape-sandbox")
-            .attr("csp", "script-src 'none'; font-src 'none'; connect-src 'none'; form-action 'none'; style-src 'unsafe-inline'")  // respected only by chrome
-            .prop("credentialless", true)  // respected only by chrome
-    );
+	const iframe = (
+	// Per the HTML spec, a data: URL in an iframe is treated as its own origin:
+	// https://github.com/whatwg/html/pull/1756
+	// It is unclear, if Firefox complies, and the behaviour around data URLs is quite wild:
+	// https://github.com/whatwg/html/issues/12091
+	// Together with the sandbox attribute disallowing all JavaScript, and the fact
+	// that we sanitize the HTML before we even save it to the database, this should
+	// still be the safest way to render HTML in the context of our backend.
+		$('<iframe>')
+			.height(height)
+			.attr('class', 'html-email')
+			.attr('src', url)
+			.attr('sandbox', 'allow-popups allow-popups-to-escape-sandbox')
+			.attr('csp', 'script-src \'none\'; font-src \'none\'; connect-src \'none\'; form-action \'none\'; style-src \'unsafe-inline\'') // respected only by chrome
+			.prop('credentialless', true) // respected only by chrome
+	)
 
-    console.log(parent, iframe);
-    parent.append(iframe);
+	console.log(parent, iframe)
+	parent.append(iframe)
 }
 
 $(function () {
-    const script_element = $("#mail_body_html");
-    if (!script_element.length) return;
-    if (!is_sandbox_supported()) {
-        // Browser is too old for <iframe sandbox>
-        $(script_element.parent()).text("Please switch to a modern browser to view HTML content safely.");
-        return;
-    }
+	const script_element = $('#mail_body_html')
+	if (!script_element.length) return
+	if (!is_sandbox_supported()) {
+		// Browser is too old for <iframe sandbox>
+		$(script_element.parent()).text('Please switch to a modern browser to view HTML content safely.')
+		return
+	}
 
-    safe_render(JSON.parse(script_element.html()), script_element.parent());
-});
+	safe_render(JSON.parse(script_element.html()), script_element.parent())
+})

src/pretix/static/pretixcontrol/js/ui/plugins.js

@@ -1,84 +1,89 @@
-$(function() {
-    var plugins = $(".plugin-container").toArray().map(function(el) {
-        return {
-            sortName: el.getAttribute('data-plugin-name').toLowerCase().replace(/pretix /g, ''),
-            name: el.getAttribute('data-plugin-name').toLowerCase(),
-            module: el.getAttribute('data-plugin-module').toLowerCase(),
-            description: $(el).find('.plugin-description').text().toLowerCase(),
-            html: el.outerHTML,
-            category: $(el).closest('[data-plugin-category]').attr('data-plugin-category'),
-            categoryLabel: $(el).closest('[data-plugin-category]').attr('data-plugin-category-label'),
-            active: !!$(el).has('[data-is-active]').length,
-        }
-    });
-    function SearchMatcher(term, fields) {
-        this.searchFor = term.toLowerCase().split(/\s+/);
-        this.fields = fields;
-    }
-    function inStringRanked(haystack, needle) {
-        let pos = -1, rank = 0;
-        do {
-            pos = haystack.indexOf(needle, pos + 1);
-            if (pos !== -1) rank = 10;
-            if (pos === 0 || haystack.charCodeAt(pos - 1) <= 47)
-                return 15;  // string start or word start (=char before match is special char)
-        } while (pos !== -1);
-        return rank;
-    }
-    SearchMatcher.prototype.isMatch = function(obj) {
-        let rank = 0;
-        for(let j = 0; j < this.searchFor.length; j++) {
-            var searchFor = this.searchFor[j];
-            for(let i = this.fields.length - 1; i >= 0; i--) {
-                var result = inStringRanked(obj[this.fields[i]], searchFor);
-                if (result) {
-                    rank += (i + 1) * result;
-                    break;
-                }
-            }
-        }
-        return rank;
-    }
-    function strcmp(a, b) {
-        return a > b ? 1 : a < b ? -1 : 0;
-    }
-    var $results_box = $("#plugin_search_results");
-    var $plugin_tabs = $("#plugin_tabs");
-    var $results = $("#plugin_search_results .plugin-list");
-    function search() {
-        $results.html("");
-        var value = $("#plugin_search_input").val();
-        var only_active = $("input[name=plugin_state_filter][value=active]").prop("checked");
-        if (!value && !only_active) {
-            $results_box.hide(); $plugin_tabs.show();
-            return;
-        }
-        $results_box.show(); $plugin_tabs.hide();
-        var matcher = new SearchMatcher(value, ["description", "module", "name"]);
-        var matches = [];
-        for(const plugin of plugins) {
-            if (only_active && !plugin.active) continue;
-            var rank = matcher.isMatch(plugin);
-            if (!rank) continue;
-            matches.push([rank, plugin]);
-        }
-        matches.sort(function (a,b) { return (b[0]-a[0]) || strcmp(a[1].sortName, b[1].sortName); })
-        $results.append(matches.map(function(res) { return $(res[1].html).prepend('<span class="pull-right">' + res[1].categoryLabel + '</span>'); }))
-        $results.find(".panel-body, .panel, .featured-plugin, .btn-lg").removeClass("panel-body panel featured-plugin btn-lg");
-        if (matches.length === 0) {
-            $results.append(gettext("No results"));
-        }
-    }
-    $("#plugin_search_input").on("input", search);
-    $("input[name=plugin_state_filter]").on("change", search);
-    $results_box.find("button.close").on("click", function() {
-        $("input[name=plugin_state_filter][value=all]").prop("checked", true).trigger("click");
-        $("#plugin_search_input").val("").trigger("input");
-    });
-    if (location.search) {
-        var search = new URLSearchParams(location.search);
-        if (search.has('q')) {
-            $("#plugin_search_input").val(search.get("q")).trigger("input");
-        }
-    }
+/* global gettext */
+$(function () {
+	let plugins = $('.plugin-container').toArray().map(function (el) {
+		return {
+			sortName: el.getAttribute('data-plugin-name').toLowerCase().replace(/pretix /g, ''),
+			name: el.getAttribute('data-plugin-name').toLowerCase(),
+			module: el.getAttribute('data-plugin-module').toLowerCase(),
+			description: $(el).find('.plugin-description').text().toLowerCase(),
+			html: el.outerHTML,
+			category: $(el).closest('[data-plugin-category]').attr('data-plugin-category'),
+			categoryLabel: $(el).closest('[data-plugin-category]').attr('data-plugin-category-label'),
+			active: !!$(el).has('[data-is-active]').length,
+		}
+	})
+	function SearchMatcher (term, fields) {
+		this.searchFor = term.toLowerCase().split(/\s+/)
+		this.fields = fields
+	}
+	function inStringRanked (haystack, needle) {
+		let pos = -1, rank = 0
+		do {
+			pos = haystack.indexOf(needle, pos + 1)
+			if (pos !== -1) rank = 10
+			if (pos === 0 || haystack.charCodeAt(pos - 1) <= 47)
+				return 15 // string start or word start (=char before match is special char)
+		} while (pos !== -1)
+		return rank
+	}
+	SearchMatcher.prototype.isMatch = function (obj) {
+		let rank = 0
+		for (let j = 0; j < this.searchFor.length; j++) {
+			let searchFor = this.searchFor[j]
+			for (let i = this.fields.length - 1; i >= 0; i--) {
+				let result = inStringRanked(obj[this.fields[i]], searchFor)
+				if (result) {
+					rank += (i + 1) * result
+					break
+				}
+			}
+		}
+		return rank
+	}
+	function strcmp (a, b) {
+		return a > b ? 1 : a < b ? -1 : 0
+	}
+	let $results_box = $('#plugin_search_results')
+	let $plugin_tabs = $('#plugin_tabs')
+	let $results = $('#plugin_search_results .plugin-list')
+	function search () {
+		$results.html('')
+		let value = $('#plugin_search_input').val()
+		let only_active = $('input[name=plugin_state_filter][value=active]').prop('checked')
+		if (!value && !only_active) {
+			$results_box.hide()
+			$plugin_tabs.show()
+			return
+		}
+		$results_box.show()
+		$plugin_tabs.hide()
+		let matcher = new SearchMatcher(value, ['description', 'module', 'name'])
+		let matches = []
+		for (const plugin of plugins) {
+			if (only_active && !plugin.active)
+				continue
+			let rank = matcher.isMatch(plugin)
+			if (!rank)
+				continue
+			matches.push([rank, plugin])
+		}
+		matches.sort(function (a, b) { return (b[0] - a[0]) || strcmp(a[1].sortName, b[1].sortName) })
+		$results.append(matches.map(function (res) { return $(res[1].html).prepend('<span class="pull-right">' + res[1].categoryLabel + '</span>') }))
+		$results.find('.panel-body, .panel, .featured-plugin, .btn-lg').removeClass('panel-body panel featured-plugin btn-lg')
+		if (matches.length === 0) {
+			$results.append(gettext('No results'))
+		}
+	}
+	$('#plugin_search_input').on('input', search)
+	$('input[name=plugin_state_filter]').on('change', search)
+	$results_box.find('button.close').on('click', function () {
+		$('input[name=plugin_state_filter][value=all]').prop('checked', true).trigger('click')
+		$('#plugin_search_input').val('').trigger('input')
+	})
+	if (location.search) {
+		var search = new URLSearchParams(location.search)
+		if (search.has('q')) {
+			$('#plugin_search_input').val(search.get('q')).trigger('input')
+		}
+	}
 })

src/pretix/static/pretixcontrol/js/ui/question.js

@@ -1,156 +1,156 @@
-/*global $, Morris, gettext*/
+/* global Morris, gettext, apiGET, i18nToString */
 $(function () {
-    // Question view
-    if (!$("#question_chart").length) {
-        return;
-    }
+	// Question view
+	if (!$('#question_chart').length) {
+		return
+	}
 
-    $(".chart").css("height", "250px");
-    var data_type = $("#question_chart").attr("data-type"),
-        data = JSON.parse($("#question-chart-data").text() || "[]"),
-        others_sum = 0,
-        max_num = 8;
+	$('.chart').css('height', '250px')
+	let data_type = $('#question_chart').attr('data-type'),
+		data = JSON.parse($('#question-chart-data').text() || '[]'),
+		others_sum = 0,
+		max_num = 8
 
-    data = data.map(function (d) {
-        return {
-            'value': d.count,
-            'label': d.answer.length > 20 ? d.answer.substring(0, 20) + '…' : d.answer,
-        }
-    });
+	data = data.map(function (d) {
+		return {
+			value: d.count,
+			label: d.answer.length > 20 ? d.answer.substring(0, 20) + '…' : d.answer,
+		}
+	})
 
-    if (data_type == 'N') {
-        // Sort
-        data.sort(function (a, b) {
-            if (parseFloat(a.label) > parseFloat(b.label)) {
-                return 1;
-            } else if (parseFloat(a.label) < parseFloat(b.label)) {
-                return -1;
-            } else {
-                return 0;
-            }
-        });
-        max_num = 20;
-    }
+	if (data_type == 'N') {
+		// Sort
+		data.sort(function (a, b) {
+			if (parseFloat(a.label) > parseFloat(b.label)) {
+				return 1
+			} else if (parseFloat(a.label) < parseFloat(b.label)) {
+				return -1
+			} else {
+				return 0
+			}
+		})
+		max_num = 20
+	}
 
-    // Limit shown options
-    if (data.length > max_num) {
-        for (var i = max_num; i < data.length; i++) {
-            others_sum += data[i].value;
-        }
-        data = data.slice(0, max_num);
-        data.push({'value': others_sum, 'label': gettext('Others')});
-    }
+	// Limit shown options
+	if (data.length > max_num) {
+		for (let i = max_num; i < data.length; i++) {
+			others_sum += data[i].value
+		}
+		data = data.slice(0, max_num)
+		data.push({ value: others_sum, label: gettext('Others') })
+	}
 
-    if (data_type === 'B') {
-        var colors;
-        if (data[0].answer_bool) {
-            colors = ['#50A167', '#C44F4F'];
-        } else {
-            colors = ['#C44F4F', '#50A167'];
-        }
-        new Morris.Donut({
-            element: 'question_chart',
-            data: data,
-            resize: true,
-            colors: colors
-        });
-    } else if (data_type === 'C') {
-        new Morris.Donut({
-            element: 'question_chart',
-            data: data,
-            resize: true,
-            colors: [
-                '#7F4A91',
-                '#50A167',
-                '#FFB419',
-                '#5F9CD4',
-                '#C44F4F',
-                '#83FFFA',
-                '#FF6C38',
-                '#1f5b8e',
-                '#2d683c',
-            ]
-        });
-    } else {  // M, N, S, T
-        new Morris.Bar({
-            element: 'question_chart',
-            data: data,
-            resize: true,
-            xkey: 'label',
-            ykeys: ['value'],
-            labels: [gettext('Count')]
-        });
-    }
+	if (data_type === 'B') {
+		let colors
+		if (data[0].answer_bool) {
+			colors = ['#50A167', '#C44F4F']
+		} else {
+			colors = ['#C44F4F', '#50A167']
+		}
+		new Morris.Donut({
+			element: 'question_chart',
+			data: data,
+			resize: true,
+			colors: colors
+		})
+	} else if (data_type === 'C') {
+		new Morris.Donut({
+			element: 'question_chart',
+			data: data,
+			resize: true,
+			colors: [
+				'#7F4A91',
+				'#50A167',
+				'#FFB419',
+				'#5F9CD4',
+				'#C44F4F',
+				'#83FFFA',
+				'#FF6C38',
+				'#1f5b8e',
+				'#2d683c',
+			]
+		})
+	} else { // M, N, S, T
+		new Morris.Bar({
+			element: 'question_chart',
+			data: data,
+			resize: true,
+			xkey: 'label',
+			ykeys: ['value'],
+			labels: [gettext('Count')]
+		})
+	}
 
-    // N, S, T
-});
+	// N, S, T
+})
 
 $(function () {
-    // Question editor
+	// Question editor
 
-    if (!$("#answer-options").length) {
-        return;
-    }
+	if (!$('#answer-options').length) {
+		return
+	}
 
-    // Question editor
-    $("#id_type").change(question_page_toggle_view);
-    $("#id_required").change(question_page_toggle_view);
-    question_page_toggle_view();
+	// Question editor
+	$('#id_type').change(question_page_toggle_view)
+	$('#id_required').change(question_page_toggle_view)
+	question_page_toggle_view()
 
-    function question_page_toggle_view() {
-        var show = $("#id_type").val() == "C" || $("#id_type").val() == "M";
-        $("#answer-options").toggle(show);
+	function question_page_toggle_view () {
+		let show = $('#id_type').val() == 'C' || $('#id_type').val() == 'M'
+		$('#answer-options').toggle(show)
 
-        $("#valid-date").toggle($("#id_type").val() == "D");
-        $("#valid-datetime").toggle($("#id_type").val() == "W");
-        $("#valid-string").toggle($("#id_type").val() == "T" || $("#id_type").val() == "S");
-        $("#valid-number").toggle($("#id_type").val() == "N");
-        $("#valid-file").toggle($("#id_type").val() == "F");
+		$('#valid-date').toggle($('#id_type').val() == 'D')
+		$('#valid-datetime').toggle($('#id_type').val() == 'W')
+		$('#valid-string').toggle($('#id_type').val() == 'T' || $('#id_type').val() == 'S')
+		$('#valid-number').toggle($('#id_type').val() == 'N')
+		$('#valid-file').toggle($('#id_type').val() == 'F')
 
-        show = $("#id_type").val() == "B" && $("#id_required").prop("checked");
-        $(".alert-required-boolean").toggle(show);
-    }
+		show = $('#id_type').val() == 'B' && $('#id_required').prop('checked')
+		$('.alert-required-boolean').toggle(show)
+	}
 
-    var $val = $("#id_dependency_values");
-    var $dq = $("#id_dependency_question");
-    var oldval = JSON.parse($("#dependency_value_val").text());
-    function update_dependency_options() {
-        $val.parent().find(".loading-indicator").remove();
-        $("#id_dependency_values option").remove();
-        $("#id_dependency_values").prop("required", false);
+	let $val = $('#id_dependency_values')
+	let $dq = $('#id_dependency_question')
+	let oldval = JSON.parse($('#dependency_value_val').text())
+	function update_dependency_options () {
+		$val.parent().find('.loading-indicator').remove()
+		$('#id_dependency_values option').remove()
+		$('#id_dependency_values').prop('required', false)
 
-        var val = $dq.children("option:selected").val();
-        if (!val) {
-            $("#id_dependency_values").show();
-            $val.show();
-            return;
-        }
+		let val = $dq.children('option:selected').val()
+		if (!val) {
+			$('#id_dependency_values').show()
+			$val.show()
+			return
+		}
 
-        $("#id_dependency_values").prop("required", true);
-        $val.hide();
-        $val.parent().append("<div class=\"help-block loading-indicator\"><span class=\"fa" +
-            " fa-cog fa-spin\"></span></div>");
+		$('#id_dependency_values').prop('required', true)
+		$val.hide()
+		$val.parent().append('<div class="help-block loading-indicator"><span class="fa'
+			+ ' fa-cog fa-spin"></span></div>')
 
-				// the container_type parameter is undocumented. this API is going to change in a later release.
-        apiGET('/api/v1/organizers/' + $("body").attr("data-organizer") + '/events/' + $("body").attr("data-event") + '/questions/' + val + '/?container_type=' + encodeURIComponent($dq.data('container-type')), function (data) {
-            if (data.type === "B") {
-                $val.append($("<option>").attr("value", "True").text(gettext("Yes")));
-                $val.append($("<option>").attr("value", "False").text(gettext("No")));
-            } else {
-                for (var i = 0; i < data.options.length; i++) {
-                    var opt = data.options[i];
-                    var $opt = $("<option>").attr("value", opt.identifier).text(i18nToString(opt.answer));
-                    $val.append($opt);
-                }
-            }
-            if (oldval) {
-                $val.val(oldval);
-            }
-            $val.parent().find(".loading-indicator").remove();
-            $val.show();
-        });
-    }
+		// the container_type parameter is undocumented. this API is going to change in a later release.
+		apiGET('/api/v1/organizers/' + $('body').attr('data-organizer') + '/events/' + $('body').attr('data-event') + '/questions/' + val + '/?container_type=' + encodeURIComponent($dq.data('container-type')), function (data) {
+			if (data.type === 'B') {
+				$val.append($('<option>').attr('value', 'True').text(gettext('Yes')))
+				$val.append($('<option>').attr('value', 'False').text(gettext('No')))
+			} else {
+				for (let i = 0; i < data.options.length; i++) {
+					let opt = data.options[i]
+					let $opt = $('<option>').attr('value', opt.identifier).text(i18nToString(opt.answer))
+					$val.append($opt)
+				}
+			}
+			if (oldval) {
+				$val.val(oldval)
+			}
+			$val.parent().find('.loading-indicator').remove()
+			$val.show()
+		})
+	}
 
-    update_dependency_options();
-    $dq.change(update_dependency_options);
-});
+	update_dependency_options()
+	$dq.change(update_dependency_options)
+})

src/pretix/static/pretixcontrol/js/ui/quicksetup.js

@@ -1,50 +1,50 @@
 $(function () {
-    "use strict";
+	'use strict'
 
-    var ticket_type_quota_calculation = function () {
-        var sum = 0;
-        $("#ticket-type-formset div[data-formset-form]").each(function () {
-            if (!$(this).find("input[name$=DELETE]").prop("checked")) {
-                var val = $(this).find("input[name$=quota]").val();
-                if (val === "") {
-                    sum = "∞";
-                } else if (sum !== "∞") {
-                    sum += parseInt(val);
-                }
-            }
-        });
-        $("#total-capacity").text(sum);
-    };
+	let ticket_type_quota_calculation = function () {
+		let sum = 0
+		$('#ticket-type-formset div[data-formset-form]').each(function () {
+			if (!$(this).find('input[name$=DELETE]').prop('checked')) {
+				let val = $(this).find('input[name$=quota]').val()
+				if (val === '') {
+					sum = '∞'
+				} else if (sum !== '∞') {
+					sum += parseInt(val)
+				}
+			}
+		})
+		$('#total-capacity').text(sum)
+	}
 
-    var toggle_payment = function () {
-        var any = false;
-        $("#ticket-type-formset div[data-formset-form]").each(function () {
-            if (!$(this).find("input[name$=DELETE]").prop("checked")) {
-                var val = $(this).find("input[name$=default_price]").val();
-                if (/.*[1-9].*/.test(val)) {
-                    any = true;
-                }
-            }
-        });
-        if ($("#quick-setup-step-payment:visible").length && !any) {
-            $("#quick-setup-step-payment").stop().slideUp();
-        } else if (!$("#quick-setup-step-payment:visible").length && any) {
-            $("#quick-setup-step-payment").stop().slideDown();
-        }
-    };
+	let toggle_payment = function () {
+		let any = false
+		$('#ticket-type-formset div[data-formset-form]').each(function () {
+			if (!$(this).find('input[name$=DELETE]').prop('checked')) {
+				let val = $(this).find('input[name$=default_price]').val()
+				if (/.*[1-9].*/.test(val)) {
+					any = true
+				}
+			}
+		})
+		if ($('#quick-setup-step-payment:visible').length && !any) {
+			$('#quick-setup-step-payment').stop().slideUp()
+		} else if (!$('#quick-setup-step-payment:visible').length && any) {
+			$('#quick-setup-step-payment').stop().slideDown()
+		}
+	}
 
-    $("#ticket-type-formset").bind("formAdded", ticket_type_quota_calculation);
-    $("#ticket-type-formset").on("change keyup keydown keypress", "input", function () {
-        ticket_type_quota_calculation();
-        toggle_payment();
-    });
-    ticket_type_quota_calculation();
-    toggle_payment();
+	$('#ticket-type-formset').bind('formAdded', ticket_type_quota_calculation)
+	$('#ticket-type-formset').on('change keyup keydown keypress', 'input', function () {
+		ticket_type_quota_calculation()
+		toggle_payment()
+	})
+	ticket_type_quota_calculation()
+	toggle_payment()
 
-    $("#total-capacity-edit").click(function () {
-        $("#id_total_quota").val(parseInt($("#total-capacity").text()));
-        $("#total-capacity").hide();
-        $("#id_total_quota").closest("div").removeClass("sr-only");
-        $("#total-capacity-edit").hide();
-    });
-});
+	$('#total-capacity-edit').click(function () {
+		$('#id_total_quota').val(parseInt($('#total-capacity').text()))
+		$('#total-capacity').hide()
+		$('#id_total_quota').closest('div').removeClass('sr-only')
+		$('#total-capacity-edit').hide()
+	})
+})

src/pretix/static/pretixcontrol/js/ui/quota.js

@@ -1,43 +1,43 @@
-/*globals $, Morris, gettext*/
+/* globals Morris */
 $(function () {
-    if (!$("#quota-stats").length) {
-        return;
-    }
+	if (!$('#quota-stats').length) {
+		return
+	}
 
-    $(".chart").css("height", "250px");
-    new Morris.Donut({
-        element: 'quota_chart',
-        data: JSON.parse($("#quota-chart-data").html()),
-        resize: true,
-        colors: [
-            '#0044CC', // paid
-            '#0088CC', // pending
-            '#BD362F', // vouchers
-            '#F89406', // carts
-            '#51A351' // available
-        ]
-    });
-});
+	$('.chart').css('height', '250px')
+	new Morris.Donut({
+		element: 'quota_chart',
+		data: JSON.parse($('#quota-chart-data').html()),
+		resize: true,
+		colors: [
+			'#0044CC', // paid
+			'#0088CC', // pending
+			'#BD362F', // vouchers
+			'#F89406', // carts
+			'#51A351' // available
+		]
+	})
+})
 
 $(function () {
-    if (!$("input[name=itemvars]").length) {
-        return;
-    }
-    var autofill = ($("#id_name").val() === "");
+	if (!$('input[name=itemvars]').length) {
+		return
+	}
+	let autofill = ($('#id_name').val() === '')
 
-    $("#id_name").on("change keyup keydown keypress", function () {
-        autofill = false;
-    })
+	$('#id_name').on('change keyup keydown keypress', function () {
+		autofill = false
+	})
 
-    function do_autofill() {
-        if (autofill) {
-            var names = [];
-            $("input[name=itemvars]:checked").each(function () {
-                names.push($.trim($(this).closest("label").text()))
-            });
-            $("#id_name").val(names.join(', '));
-        }
-    }
-    $("input[name=itemvars]").change(do_autofill);
-    do_autofill();
-});
+	function do_autofill () {
+		if (autofill) {
+			let names = []
+			$('input[name=itemvars]:checked').each(function () {
+				names.push($.trim($(this).closest('label').text()))
+			})
+			$('#id_name').val(names.join(', '))
+		}
+	}
+	$('input[name=itemvars]').change(do_autofill)
+	do_autofill()
+})

src/pretix/static/pretixcontrol/js/ui/rrule.js

@@ -1,21 +1,19 @@
-/*globals $, Morris, gettext, RRule, RRuleSet*/
-function rrule_form_toggles($form) {
-    var freq = $form.find("select[name*=freq]").val();
-    $form.find(".repeat-yearly").toggle(freq === "yearly");
-    $form.find(".repeat-monthly").toggle(freq === "monthly");
-    $form.find(".repeat-weekly").toggle(freq === "weekly");
+function rrule_form_toggles ($form) {
+	let freq = $form.find('select[name*=freq]').val()
+	$form.find('.repeat-yearly').toggle(freq === 'yearly')
+	$form.find('.repeat-monthly').toggle(freq === 'monthly')
+	$form.find('.repeat-weekly').toggle(freq === 'weekly')
 }
 
-function rrule_bind_form($form) {
-    $form.find("select[name*=freq]").change(function () {
-        rrule_form_toggles($form);
-    });
-    rrule_form_toggles($form);
+function rrule_bind_form ($form) {
+	$form.find('select[name*=freq]').change(function () {
+		rrule_form_toggles($form)
+	})
+	rrule_form_toggles($form)
 }
 
-
-$(document).on("pretix:bind-forms", function () {
-    $(".rrule-form").each(function () {
-        rrule_bind_form($(this));
-    });
-});
+$(document).on('pretix:bind-forms', function () {
+	$('.rrule-form').each(function () {
+		rrule_bind_form($(this))
+	})
+})

src/pretix/static/pretixcontrol/js/ui/subevent.js

@@ -1,226 +1,225 @@
-/*globals $, Morris, gettext, RRule, RRuleSet*/
+/* globals ngettext, rrule */
 
-$(document).on("pretix:bind-forms", function () {
-    if (!$("div[data-formset-prefix=checkinlist_set]").length) {
-        return;
-    }
+$(document).on('pretix:bind-forms', function () {
+	if (!$('div[data-formset-prefix=checkinlist_set]').length) {
+		return
+	}
 
-    function parse_weekday(wd) {
-        map = {
-            'MO': 0,
-            'TU': 1,
-            'WE': 2,
-            'TH': 3,
-            'FR': 4,
-            'SA': 5,
-            'SU': 6
-        }
-        if (wd.indexOf(",") > 0) {
-            var wds = [];
-            $.each(wd.split(","), function (k, v) {
-                wds.push(map[v]);
-            });
-            return wds;
-        } else {
-            return map[wd];
-        }
-    }
+	function parse_weekday (wd) {
+		map = {
+			MO: 0,
+			TU: 1,
+			WE: 2,
+			TH: 3,
+			FR: 4,
+			SA: 5,
+			SU: 6
+		}
+		if (wd.indexOf(',') > 0) {
+			let wds = []
+			$.each(wd.split(','), function (k, v) {
+				wds.push(map[v])
+			})
+			return wds
+		} else {
+			return map[wd]
+		}
+	}
 
-    // RRule editor
-    function rrule_preview() {
-        var ruleset = new rrule.RRuleSet();
+	// RRule editor
+	function rrule_preview () {
+		let ruleset = new rrule.RRuleSet()
 
-        $(".rrule-form").each(function () {
-            if ($(this).find("input[name$=DELETE]").prop("checked")) {
-                return;
-            }
+		$('.rrule-form').each(function () {
+			if ($(this).find('input[name$=DELETE]').prop('checked')) {
+				return
+			}
 
-            var rule_args = {};
-            var $form = $(this);
-            var freq = $form.find("select[name*=freq]").val();
-            if (!$form.find("input[name*=dtstart]").data("DateTimePicker")) {
-                // uninitialized
-                return;
-            }
-            var dtstart = $form.find("input[name*=dtstart]").data("DateTimePicker").date();
-            dtstart = dtstart.add(dtstart.utcOffset(), 'm').add(12, 'h').utcOffset(0);
-            rule_args.dtstart = dtstart.toDate();
-            rule_args.interval = parseInt($form.find("input[name*=interval]").val()) || 1;
+			let rule_args = {}
+			let $form = $(this)
+			let freq = $form.find('select[name*=freq]').val()
+			if (!$form.find('input[name*=dtstart]').data('DateTimePicker')) {
+				// uninitialized
+				return
+			}
+			let dtstart = $form.find('input[name*=dtstart]').data('DateTimePicker').date()
+			dtstart = dtstart.add(dtstart.utcOffset(), 'm').add(12, 'h').utcOffset(0)
+			rule_args.dtstart = dtstart.toDate()
+			rule_args.interval = parseInt($form.find('input[name*=interval]').val()) || 1
 
-            if (freq === 'yearly') {
-                rule_args.freq = rrule.RRule.YEARLY;
+			if (freq === 'yearly') {
+				rule_args.freq = rrule.RRule.YEARLY
 
-                var same = $form.find("input[name*=yearly_same]:checked").val();
-                if (same === "off") {
-                    rule_args.bysetpos = parseInt($form.find("select[name*=yearly_bysetpos]").val());
-                    rule_args.byweekday = parse_weekday($form.find("select[name*=yearly_byweekday]").val());
-                    rule_args.bymonth = parseInt($form.find("select[name*=yearly_bymonth]").val());
-                }
-            } else if (freq === 'monthly') {
-                rule_args.freq = rrule.RRule.MONTHLY;
+				var same = $form.find('input[name*=yearly_same]:checked').val()
+				if (same === 'off') {
+					rule_args.bysetpos = parseInt($form.find('select[name*=yearly_bysetpos]').val())
+					rule_args.byweekday = parse_weekday($form.find('select[name*=yearly_byweekday]').val())
+					rule_args.bymonth = parseInt($form.find('select[name*=yearly_bymonth]').val())
+				}
+			} else if (freq === 'monthly') {
+				rule_args.freq = rrule.RRule.MONTHLY
 
-                var same = $form.find("input[name*=monthly_same]:checked").val();
-                if (same === "off") {
-                    rule_args.bysetpos = parseInt($form.find("select[name*=monthly_bysetpos]").val());
-                    rule_args.byweekday = parse_weekday($form.find("select[name*=monthly_byweekday]").val());
-                }
-            } else if (freq === 'weekly') {
-                rule_args.freq = rrule.RRule.WEEKLY;
+				var same = $form.find('input[name*=monthly_same]:checked').val()
+				if (same === 'off') {
+					rule_args.bysetpos = parseInt($form.find('select[name*=monthly_bysetpos]').val())
+					rule_args.byweekday = parse_weekday($form.find('select[name*=monthly_byweekday]').val())
+				}
+			} else if (freq === 'weekly') {
+				rule_args.freq = rrule.RRule.WEEKLY
 
-                var days = [];
-                $form.find("input[name*=weekly_byweekday]:checked").each(function () {
-                    days.push(parse_weekday($(this).val()));
-                });
-                if (days.length !== 0) {
-                    rule_args.byweekday = days;
-                }
-            } else if (freq === 'daily') {
-                rule_args.freq = rrule.RRule.DAILY;
-            }
+				let days = []
+				$form.find('input[name*=weekly_byweekday]:checked').each(function () {
+					days.push(parse_weekday($(this).val()))
+				})
+				if (days.length !== 0) {
+					rule_args.byweekday = days
+				}
+			} else if (freq === 'daily') {
+				rule_args.freq = rrule.RRule.DAILY
+			}
 
-            var end = $form.find("input[name*=end]:checked").val();
-            if (end === "count") {
-                rule_args.count = Math.max(parseInt($form.find("input[name*=count]").val()) || 1, 1);
-            } else {
-                var date = $form.find("input[name*=until]").data("DateTimePicker").date();
-                if (date !== null) {
-                    // rrule.until is non-inclusive, whereas in pretix-backend "until" is inclusive => add 1 day
-                    // date is a Moment-object. Moment.add() mutates, but is save to do here
-                    date.add(1, 'days');
-                    rule_args.until = date;
-                }
-            }
+			let end = $form.find('input[name*=end]:checked').val()
+			if (end === 'count') {
+				rule_args.count = Math.max(parseInt($form.find('input[name*=count]').val()) || 1, 1)
+			} else {
+				let date = $form.find('input[name*=until]').data('DateTimePicker').date()
+				if (date !== null) {
+					// rrule.until is non-inclusive, whereas in pretix-backend "until" is inclusive => add 1 day
+					// date is a Moment-object. Moment.add() mutates, but is save to do here
+					date.add(1, 'days')
+					rule_args.until = date
+				}
+			}
 
-            if ($form.find("input[name*=exclude]").prop("checked")) {
-                ruleset.exrule(new rrule.RRule(rule_args));
-                $form.closest(".panel").addClass("panel-danger").removeClass("panel-default");
-            } else {
-                ruleset.rrule(new rrule.RRule(rule_args));
-                $form.closest(".panel").addClass("panel-default").removeClass("panel-danger");
-            }
-        });
+			if ($form.find('input[name*=exclude]').prop('checked')) {
+				ruleset.exrule(new rrule.RRule(rule_args))
+				$form.closest('.panel').addClass('panel-danger').removeClass('panel-default')
+			} else {
+				ruleset.rrule(new rrule.RRule(rule_args))
+				$form.closest('.panel').addClass('panel-default').removeClass('panel-danger')
+			}
+		})
 
-        var all_dates = ruleset.all();
-        var format = $("body").attr("data-longdateformat") + " (dddd)";
-        $("#rrule-preview").html("");
-        if (all_dates.length > 20) {
-            $("#rrule-preview").html("");
-            all_dates.slice(0, 10).forEach(function(element) {
-                $("#rrule-preview").append($("<li>").text(moment(element).utc().format(format)));
-            });
-            $("#rrule-preview").append($("<li>").text(ngettext(
-                    "(one more date)",
-                    "({num} more dates)",
-                    all_dates.length - 20
-            ).replace(/\{num\}/g, all_dates.length - 20)));
-            all_dates.slice(-10).forEach(function(element) {
-                $("#rrule-preview").append($("<li>").text(moment(element).utc().format(format)));
-            });
-        } else {
-            all_dates.forEach(function(element) {
-                $("#rrule-preview").append($("<li>").text(moment(element).utc().format(format)));
-            });
-        }
-    }
-    $("#rrule-formset").on("change keydown keyup keypress dp.change", "input, select", function () {
-        rrule_preview();
-    });
-    rrule_preview();
+		let all_dates = ruleset.all()
+		let format = $('body').attr('data-longdateformat') + ' (dddd)'
+		$('#rrule-preview').html('')
+		if (all_dates.length > 20) {
+			$('#rrule-preview').html('')
+			all_dates.slice(0, 10).forEach(function (element) {
+				$('#rrule-preview').append($('<li>').text(moment(element).utc().format(format)))
+			})
+			$('#rrule-preview').append($('<li>').text(ngettext(
+				'(one more date)',
+				'({num} more dates)',
+				all_dates.length - 20
+			).replace(/\{num\}/g, all_dates.length - 20)))
+			all_dates.slice(-10).forEach(function (element) {
+				$('#rrule-preview').append($('<li>').text(moment(element).utc().format(format)))
+			})
+		} else {
+			all_dates.forEach(function (element) {
+				$('#rrule-preview').append($('<li>').text(moment(element).utc().format(format)))
+			})
+		}
+	}
+	$('#rrule-formset').on('change keydown keyup keypress dp.change', 'input, select', function () {
+		rrule_preview()
+	})
+	rrule_preview()
 
-    $("#rrule-formset").on("formAdded", "div", function (event) {rrule_bind_form($(event.target)); });
+	$('#rrule-formset').on('formAdded', 'div', function (event) { rrule_bind_form($(event.target)) })
 
-    // Timeslot editor
-    $("#subevent_add_many_slots_go").on("click", function () {
-        $("#time-formset [data-formset-form]").each(function () {
-            var tf = $(this).find("[name$=time_from]").val()
-            if (!tf) {
-                $(this).remove();
-            }
-        })
+	// Timeslot editor
+	$('#subevent_add_many_slots_go').on('click', function () {
+		$('#time-formset [data-formset-form]').each(function () {
+			let tf = $(this).find('[name$=time_from]').val()
+			if (!tf) {
+				$(this).remove()
+			}
+		})
 
-        var first = $("#subevent_add_many_slots_first").data('DateTimePicker').date();
-        var end = $("#subevent_add_many_slots_end").data('DateTimePicker').date();
-        var length_m = parseFloat($("#subevent_add_many_slots_length").val()) || 0;
-        var break_m = parseFloat($("#subevent_add_many_slots_break").val()) || 0;
-        if (!first || !end || !length_m) {
-            console.log("invalid", first, end, length_m)
-            return
-        }
+		let first = $('#subevent_add_many_slots_first').data('DateTimePicker').date()
+		let end = $('#subevent_add_many_slots_end').data('DateTimePicker').date()
+		let length_m = parseFloat($('#subevent_add_many_slots_length').val()) || 0
+		let break_m = parseFloat($('#subevent_add_many_slots_break').val()) || 0
+		if (!first || !end || !length_m) {
+			console.log('invalid', first, end, length_m)
+			return
+		}
 
-        function closure($form, time) {
-            return function () {
-                console.log("setting value", time)
-                $form.find("[name$=time_from]").data('DateTimePicker').date(time);
-                time.add(length_m, 'minutes');
-                $form.find("[name$=time_to]").data('DateTimePicker').date(time);
-            }
-        }
+		function closure ($form, time) {
+			return function () {
+				console.log('setting value', time)
+				$form.find('[name$=time_from]').data('DateTimePicker').date(time)
+				time.add(length_m, 'minutes')
+				$form.find('[name$=time_to]').data('DateTimePicker').date(time)
+			}
+		}
 
-        var pointer = first.clone();
-        while (pointer.isBefore(end)) {
-            var $form = $("#time-formset").formset("getOrCreate").addForm();
-            $form.attr("data-formset-created-at-runtime", "false");  // prevents animation
-            var time = pointer.clone();
-            window.setTimeout(closure($form, time), 1);
-            // jquery.formset.js only calls trigger("formAdded") after a setTimeout of 0,
-            // but we need to run after that to make sure the date pickers are initialized
-            pointer.add(break_m + length_m, 'minutes');
-        }
-        $("#subevent_add_many_slots").addClass("hidden");
-        $("#subevent_add_many_slots_start").removeClass("hidden");
+		let pointer = first.clone()
+		while (pointer.isBefore(end)) {
+			let $form = $('#time-formset').formset('getOrCreate').addForm()
+			$form.attr('data-formset-created-at-runtime', 'false') // prevents animation
+			let time = pointer.clone()
+			window.setTimeout(closure($form, time), 1)
+			// jquery.formset.js only calls trigger("formAdded") after a setTimeout of 0,
+			// but we need to run after that to make sure the date pickers are initialized
+			pointer.add(break_m + length_m, 'minutes')
+		}
+		$('#subevent_add_many_slots').addClass('hidden')
+		$('#subevent_add_many_slots_start').removeClass('hidden')
+	})
+	$('#subevent_add_many_slots_start').on('click', function () {
+		$('#subevent_add_many_slots').removeClass('hidden')
+		$(this).addClass('hidden')
+	})
 
-    });
-    $("#subevent_add_many_slots_start").on("click", function () {
-       $("#subevent_add_many_slots").removeClass("hidden");
-       $(this).addClass("hidden");
-    });
+	// Hide config for products that are not for sale
+	function quota_form_handlers (el) {
+		// searchable_selection = True
+		el.find('[id^="id_quotas-"]').on('select2:select select2:unselect', () => {
+			update_item_visibility()
+		})
+		// searchable_selection = False
+		el.find('input[id^="id_quotas-"][id*=itemvars_]').on('change', () => {
+			update_item_visibility()
+		})
+	}
+	function update_item_visibility () {
+		const itemvars = []
 
-    // Hide config for products that are not for sale
-    function quota_form_handlers(el) {
-        // searchable_selection = True
-        el.find('[id^="id_quotas-"]').on("select2:select select2:unselect", () => {
-            update_item_visibility();
-        });
-        // searchable_selection = False
-        el.find('input[id^="id_quotas-"][id*=itemvars_]').on("change", () => {
-            update_item_visibility();
-        });
-    }
-    function update_item_visibility() {
-        const itemvars = [];
+		// searchable_selection = True
+		$('select[id^=id_quotas-][id$=-itemvars]').filter((idx, el) => {
+			return !$(el).closest('[data-formset-form]').is('[data-formset-form-deleted]')
+		}).each((_, e) => itemvars.push(...$(e).val()))
+		// searchable_selection = False
+		$('input[id^=id_quotas-][id*=itemvars_]:checked').filter((idx, el) => {
+			return !$(el).closest('[data-formset-form]').is('[data-formset-form-deleted]')
+		}).each((_, e) => itemvars.push($(e).val()))
 
-        // searchable_selection = True
-        $("select[id^=id_quotas-][id$=-itemvars]").filter((idx, el) => {
-            return !$(el).closest('[data-formset-form]').is('[data-formset-form-deleted]');
-        }).each((_, e) => itemvars.push(...$(e).val()));
-        // searchable_selection = False
-        $("input[id^=id_quotas-][id*=itemvars_]:checked").filter((idx, el) => {
-            return !$(el).closest('[data-formset-form]').is('[data-formset-form-deleted]');
-        }).each((_, e) => itemvars.push($(e).val()));
+		$('div[data-itemvar]').each(function (idx, e) {
+			const el = $(e)
+			el.prop('hidden', !itemvars.includes(el.attr('data-itemvar')) && !el.find('.has-error, .alert-danger').length)
+		})
+	}
 
-        $("div[data-itemvar]").each(function (idx, e) {
-            const el = $(e);
-            el.prop("hidden", !itemvars.includes(el.attr("data-itemvar")) && !el.find(".has-error, .alert-danger").length);
-        });
-    }
+	$('[data-formset-prefix="quotas"]').on('formDeleted', 'div', () => {
+		update_item_visibility()
+	}).on('formAdded', 'div', (event) => {
+		quota_form_handlers($(event.target))
+		update_item_visibility()
+	})
+	quota_form_handlers($('body'))
+	update_item_visibility()
 
-    $('[data-formset-prefix="quotas"]').on("formDeleted", "div", () => {
-        update_item_visibility();
-    }).on("formAdded", "div", (event) => {
-        quota_form_handlers($(event.target));
-        update_item_visibility();
-    })
-    quota_form_handlers($("body"));
-    update_item_visibility();
-
-    // Auto-set name of check-in list
-    var $namef = $("input[id^=id_name]").first();
-    var lastValue = $namef.val();
-    $namef.change(function () {
-        var field = $("div[data-formset-prefix=checkinlist_set] input[id$=name]").first();
-        if (field.val() === lastValue) {
-            lastValue = $(this).val();
-            field.val(lastValue);
-        }
-    });
-});
+	// Auto-set name of check-in list
+	let $namef = $('input[id^=id_name]').first()
+	let lastValue = $namef.val()
+	$namef.change(function () {
+		let field = $('div[data-formset-prefix=checkinlist_set] input[id$=name]').first()
+		if (field.val() === lastValue) {
+			lastValue = $(this).val()
+			field.val(lastValue)
+		}
+	})
+})

src/pretix/static/pretixcontrol/js/ui/tabs.js

@@ -1,56 +1,54 @@
-/*globals $*/
-
 $(function () {
-    var j = 0;
-    $(".tabbed-form").each(function () {
-        var $form = $(this);
-        var $tabs = $("<ul>").addClass("nav nav-tabs").insertBefore($form);
-        $form.addClass("tab-content");
+	let j = 0
+	$('.tabbed-form').each(function () {
+		let $form = $(this)
+		let $tabs = $('<ul>').addClass('nav nav-tabs').insertBefore($form)
+		$form.addClass('tab-content')
 
-        var i = 0;
-        var preselect = null;
-        var validity_error = false;
-        $form.find("fieldset").each(function () {
-            var $fieldset = $(this);
-            var tid = $fieldset.attr("id");
-            if (!tid) tid = "tab-" + j + "-" + i;
-            var $tabli = $("<li>").appendTo($tabs);
-            var $tablink = $("<a>").attr("role", "tab")
-                .attr("data-toggle", "tab")
-                .attr("href", "#" + tid)
-                .text($fieldset.find("legend").text())
-                .appendTo($tabli);
-            if ($fieldset.find(".has-error, .alert-danger:not(.dynamic)").length > 0) {
-                $tablink.append(" ");
-                $tablink.append($("<span>").addClass("fa fa-warning text-danger"));
-                if (preselect === null) {
-                    preselect = i;
-                }
-            }
-            $fieldset.find("input, select, textarea").on("invalid", function () {
-                if ($tablink.find(".fa-warning").length === 0) {
-                    $tablink.append(" ");
-                    $tablink.append($("<span>").addClass("fa fa-warning text-danger"));
-                    if (!validity_error) {
-                        validity_error = true;
-                        $tablink.click();
-                    }
-                }
-            });
-            $fieldset.find("legend").remove();
-            $fieldset.addClass("tab-pane").attr("id", tid);
-            if (location.hash && ($fieldset.find(location.hash).length || location.hash === "#" + tid + "-open") && preselect === null) {
-                preselect = i;
-            }
-            i++;
-        });
-        $tabs.find("a").get(preselect != null ? preselect : 0).click();
-        $tabs.find("a").on('shown.bs.tab', function (e) {
-            history.replaceState(null, null, e.target.getAttribute("href") + "-open");
-        });
-        $form.closest("form").on("submit", function () {
-            validity_error = false;
-        });
-        j++;
-    });
-});
+		let i = 0
+		let preselect = null
+		let validity_error = false
+		$form.find('fieldset').each(function () {
+			let $fieldset = $(this)
+			let tid = $fieldset.attr('id')
+			if (!tid) tid = 'tab-' + j + '-' + i
+			let $tabli = $('<li>').appendTo($tabs)
+			let $tablink = $('<a>').attr('role', 'tab')
+				.attr('data-toggle', 'tab')
+				.attr('href', '#' + tid)
+				.text($fieldset.find('legend').text())
+				.appendTo($tabli)
+			if ($fieldset.find('.has-error, .alert-danger:not(.dynamic)').length > 0) {
+				$tablink.append(' ')
+				$tablink.append($('<span>').addClass('fa fa-warning text-danger'))
+				if (preselect === null) {
+					preselect = i
+				}
+			}
+			$fieldset.find('input, select, textarea').on('invalid', function () {
+				if ($tablink.find('.fa-warning').length === 0) {
+					$tablink.append(' ')
+					$tablink.append($('<span>').addClass('fa fa-warning text-danger'))
+					if (!validity_error) {
+						validity_error = true
+						$tablink.click()
+					}
+				}
+			})
+			$fieldset.find('legend').remove()
+			$fieldset.addClass('tab-pane').attr('id', tid)
+			if (location.hash && ($fieldset.find(location.hash).length || location.hash === '#' + tid + '-open') && preselect === null) {
+				preselect = i
+			}
+			i++
+		})
+		$tabs.find('a').get(preselect != null ? preselect : 0).click()
+		$tabs.find('a').on('shown.bs.tab', function (e) {
+			history.replaceState(null, null, e.target.getAttribute('href') + '-open')
+		})
+		$form.closest('form').on('submit', function () {
+			validity_error = false
+		})
+		j++
+	})
+})

src/pretix/static/pretixcontrol/js/ui/typeahead.js

@@ -1,164 +1,163 @@
-/*global $,u2f */
 $(function () {
-    $('.context-selector.dropdown').on('shown.bs.collapse shown.bs.dropdown', function () {
-        $(this).parent().find("input").val("").trigger('forceRunQuery').focus();
-    });
-    $('.dropdown-menu .form-box input').click(function (e) {
-        e.stopPropagation();
-    });
+	$('.context-selector.dropdown').on('shown.bs.collapse shown.bs.dropdown', function () {
+		$(this).parent().find('input').val('').trigger('forceRunQuery').focus()
+	})
+	$('.dropdown-menu .form-box input').click(function (e) {
+		e.stopPropagation()
+	})
 
-    $("[data-event-typeahead]").each(function () {
-        var $container = $(this);
-        var $query = $(this).find('[data-typeahead-query]').length ? $(this).find('[data-typeahead-query]') : $($(this).attr("data-typeahead-field"));
-        $container.find("li:not(.query-holder)").remove();
-        var lastQuery = null;
-        var runQueryTimeout = null;
-        var loadIndicatorTimeout = null;
-        var focusOutTimeout = null;
-        function showLoadIndicator() {
-            $container.find("li:not(.query-holder)").remove();
-            $container.append("<li class='loading'><span class='fa fa-4x fa-cog fa-spin'></span></li>");
-            $container.toggleClass('focused', $query.is(":focus") && $container.children().length > 0);
-        }
-        function runQuery() {
-            var thisQuery = $query.val();
-            if (thisQuery === lastQuery) return;
-            lastQuery = $query.val();
+	$('[data-event-typeahead]').each(function () {
+		let $container = $(this)
+		let $query = $(this).find('[data-typeahead-query]').length ? $(this).find('[data-typeahead-query]') : $($(this).attr('data-typeahead-field'))
+		$container.find('li:not(.query-holder)').remove()
+		let lastQuery = null
+		let runQueryTimeout = null
+		let loadIndicatorTimeout = null
+		let focusOutTimeout = null
+		function showLoadIndicator () {
+			$container.find('li:not(.query-holder)').remove()
+			$container.append('<li class=\'loading\'><span class=\'fa fa-4x fa-cog fa-spin\'></span></li>')
+			$container.toggleClass('focused', $query.is(':focus') && $container.children().length > 0)
+		}
+		function runQuery () {
+			let thisQuery = $query.val()
+			if (thisQuery === lastQuery) return
+			lastQuery = $query.val()
 
-            window.clearTimeout(loadIndicatorTimeout)
-            loadIndicatorTimeout = window.setTimeout(showLoadIndicator, 80)
+			window.clearTimeout(loadIndicatorTimeout)
+			loadIndicatorTimeout = window.setTimeout(showLoadIndicator, 80)
 
-            $.getJSON(
-                $container.attr("data-source") + "?query=" + encodeURIComponent($query.val()) + (typeof $container.attr("data-organizer") !== "undefined" ? "&organizer=" + $container.attr("data-organizer") : ""),
-                function (data) {
-                    if (thisQuery !== lastQuery) {
-                        // Lost race condition
-                        return;
-                    }
-                    window.clearTimeout(loadIndicatorTimeout);
-                    $container.find("li:not(.query-holder)").remove();
-                    $.each(data.results, function (i, res) {
-                        let $linkContent = $("<div>");
-                        if (res.type === "organizer") {
-                            $linkContent.append(
-                                $("<span>").addClass("event-name-full").append(
-                                    $("<span>").addClass("fa fa-users fa-fw")
-                                ).append(" ").append($("<div>").text(res.name).html())
-                            )
-                        } else if (res.type === "order" || res.type === "voucher") {
-                            $linkContent.append(
-                                $("<span>").addClass("event-name-full").append($("<div>").text(res.title).html())
-                            ).append(
-                                $("<span>").addClass("event-organizer").append(
-                                    $("<span>").addClass("fa fa-calendar fa-fw")
-                                ).append(" ").append($("<div>").text(res.event).html())
-                            )
-                        } else if (res.type === "user") {
-                            $linkContent.append(
-                                $("<span>").addClass("event-name-full").append(
-                                    $("<span>").addClass("fa fa-user fa-fw")
-                                ).append(" ").append($("<div>").text(res.name).html())
-                            )
-                        } else {
-                            $linkContent.append(
-                                $("<span>").addClass("event-name-full").append($("<div>").text(res.name).html())
-                            ).append(
-                                $("<span>").addClass("event-organizer").append(
-                                    $("<span>").addClass("fa fa-users fa-fw")
-                                ).append(" ").append($("<div>").text(res.organizer).html())
-                            ).append(
-                                $("<span>").addClass("event-daterange").append(
-                                    $("<span>").addClass("fa fa-calendar fa-fw")
-                                ).append(" ").append(res.date_range)
-                            )
-                        }
+			$.getJSON(
+				$container.attr('data-source') + '?query=' + encodeURIComponent($query.val()) + (typeof $container.attr('data-organizer') !== 'undefined' ? '&organizer=' + $container.attr('data-organizer') : ''),
+				function (data) {
+					if (thisQuery !== lastQuery) {
+						// Lost race condition
+						return
+					}
+					window.clearTimeout(loadIndicatorTimeout)
+					$container.find('li:not(.query-holder)').remove()
+					$.each(data.results, function (_i, res) {
+						let $linkContent = $('<div>')
+						if (res.type === 'organizer') {
+							$linkContent.append(
+								$('<span>').addClass('event-name-full').append(
+									$('<span>').addClass('fa fa-users fa-fw')
+								).append(' ').append($('<div>').text(res.name).html())
+							)
+						} else if (res.type === 'order' || res.type === 'voucher') {
+							$linkContent.append(
+								$('<span>').addClass('event-name-full').append($('<div>').text(res.title).html())
+							).append(
+								$('<span>').addClass('event-organizer').append(
+									$('<span>').addClass('fa fa-calendar fa-fw')
+								).append(' ').append($('<div>').text(res.event).html())
+							)
+						} else if (res.type === 'user') {
+							$linkContent.append(
+								$('<span>').addClass('event-name-full').append(
+									$('<span>').addClass('fa fa-user fa-fw')
+								).append(' ').append($('<div>').text(res.name).html())
+							)
+						} else {
+							$linkContent.append(
+								$('<span>').addClass('event-name-full').append($('<div>').text(res.name).html())
+							).append(
+								$('<span>').addClass('event-organizer').append(
+									$('<span>').addClass('fa fa-users fa-fw')
+								).append(' ').append($('<div>').text(res.organizer).html())
+							).append(
+								$('<span>').addClass('event-daterange').append(
+									$('<span>').addClass('fa fa-calendar fa-fw')
+								).append(' ').append(res.date_range)
+							)
+						}
 
-                        $container.append(
-                            $("<li>").append(
-                                $("<a>").attr("href", res.url).append(
-                                    $linkContent
-                                )
-                            )
-                        );
-                    });
-                    $container.toggleClass('focused', $query.is(":focus") && $container.children().length > 0);
-                }
-            );
-        }
-        $query.on("forceRunQuery", function () {
-            runQuery();
-        });
-        $query.on("input", function () {
-            if ($container.attr("data-typeahead-field") && $query.val() === "") {
-                $container.removeClass('focused');
-                $container.find("li:not(.query-holder)").remove();
-                lastQuery = null;
-                return;
-            }
-            window.clearTimeout(runQueryTimeout)
-            runQueryTimeout = window.setTimeout(runQuery, 250)
-        });
-        $query.on("keydown", function (event) {
-            var $selected = $container.find(".active");
-            if (event.which === 13) {  // enter
-                var $link = $selected.find("a");
-                if ($link.length) {
-                    location.href = $link.attr("href");
-                }
-                event.preventDefault();
-                event.stopPropagation();
-            }
-        });
-        $container.add($query).on("keydown", function (event) {
-            if (event.which === 27) {  // escape
-                $container.removeClass('focused');
-            }
-        }).on("focusin", function (event) {
-            window.clearTimeout(focusOutTimeout);
-            $(document.body).one("focusout", function (event) {
-                focusOutTimeout = window.setTimeout(function () {
-                    $container.removeClass('focused');
-                }, 100);
-            })
-        });
-        $query.on("keyup", function (event) {
-            var $first = $container.find("li:not(.query-holder)").first();
-            var $last = $container.find("li:not(.query-holder)").last();
-            var $selected = $container.find(".active");
+						$container.append(
+							$('<li>').append(
+								$('<a>').attr('href', res.url).append(
+									$linkContent
+								)
+							)
+						)
+					})
+					$container.toggleClass('focused', $query.is(':focus') && $container.children().length > 0)
+				}
+			)
+		}
+		$query.on('forceRunQuery', function () {
+			runQuery()
+		})
+		$query.on('input', function () {
+			if ($container.attr('data-typeahead-field') && $query.val() === '') {
+				$container.removeClass('focused')
+				$container.find('li:not(.query-holder)').remove()
+				lastQuery = null
+				return
+			}
+			window.clearTimeout(runQueryTimeout)
+			runQueryTimeout = window.setTimeout(runQuery, 250)
+		})
+		$query.on('keydown', function (event) {
+			let $selected = $container.find('.active')
+			if (event.which === 13) { // enter
+				let $link = $selected.find('a')
+				if ($link.length) {
+					location.href = $link.attr('href')
+				}
+				event.preventDefault()
+				event.stopPropagation()
+			}
+		})
+		$container.add($query).on('keydown', function (event) {
+			if (event.which === 27) { // escape
+				$container.removeClass('focused')
+			}
+		}).on('focusin', function () {
+			window.clearTimeout(focusOutTimeout)
+			$(document.body).one('focusout', function () {
+				focusOutTimeout = window.setTimeout(function () {
+					$container.removeClass('focused')
+				}, 100)
+			})
+		})
+		$query.on('keyup', function (event) {
+			let $first = $container.find('li:not(.query-holder)').first()
+			let $last = $container.find('li:not(.query-holder)').last()
+			let $selected = $container.find('.active')
 
-            if (event.which === 13) {  // enter
-                event.preventDefault();
-                event.stopPropagation();
-                return true;
-            } else if (event.which === 40) {  // down
-                var $next;
-                if ($selected.length === 0) {
-                    $next = $first;
-                } else {
-                    $next = $selected.next();
-                }
-                if ($next.length === 0) {
-                    $next = $first;
-                }
-                $selected.removeClass("active");
-                $next.addClass("active");
-                event.preventDefault();
-                event.stopPropagation();
-                return true;
-            } else if (event.which === 38) {  // up
-                if ($selected.length === 0) {
-                    $selected = $first;
-                }
-                var $prev = $selected.prev();
-                if ($prev.length === 0 || $prev.find("input").length > 0) {
-                    $prev = $last;
-                }
-                $selected.removeClass("active");
-                $prev.addClass("active");
-                event.preventDefault();
-                event.stopPropagation();
-                return true;
-            }
-        });
-    });
-});
+			if (event.which === 13) { // enter
+				event.preventDefault()
+				event.stopPropagation()
+				return true
+			} else if (event.which === 40) { // down
+				let $next
+				if ($selected.length === 0) {
+					$next = $first
+				} else {
+					$next = $selected.next()
+				}
+				if ($next.length === 0) {
+					$next = $first
+				}
+				$selected.removeClass('active')
+				$next.addClass('active')
+				event.preventDefault()
+				event.stopPropagation()
+				return true
+			} else if (event.which === 38) { // up
+				if ($selected.length === 0) {
+					$selected = $first
+				}
+				let $prev = $selected.prev()
+				if ($prev.length === 0 || $prev.find('input').length > 0) {
+					$prev = $last
+				}
+				$selected.removeClass('active')
+				$prev.addClass('active')
+				event.preventDefault()
+				event.stopPropagation()
+				return true
+			}
+		})
+	})
+})

src/pretix/static/pretixcontrol/js/ui/variations.js

@@ -1,78 +1,78 @@
-/*global $, Morris, gettext, formatPrice*/
+/* global i18nToString, formatPrice */
 $(function () {
-    // Question view
-    if (!$("#item_variations").length) {
-        return;
-    }
+	// Question view
+	if (!$('#item_variations').length) {
+		return
+	}
 
-    function update_variation_summary($el) {
-        var var_names = Object.fromEntries(
-          $el
-            .find("input[name*=-value_]")
-            .filter(function () {
-              return !!this.value;
-            })
-            .map(function () {
-              return [[this.getAttribute("lang"), this.value]];
-            })
-            .get()
-        );
-        var var_name = i18nToString(var_names);
-        var price = $el.find("input[name*=-default_price]").val();
-        if (price) {
-            var currency = $el.find("[name*=-default_price] + .input-group-addon").text();
-            price = formatPrice(price, currency);
-        }
+	function update_variation_summary ($el) {
+		let var_names = Object.fromEntries(
+			$el
+				.find('input[name*=-value_]')
+				.filter(function () {
+					return !!this.value
+				})
+				.map(function () {
+					return [[this.getAttribute('lang'), this.value]]
+				})
+				.get()
+		)
+		let var_name = i18nToString(var_names)
+		let price = $el.find('input[name*=-default_price]').val()
+		if (price) {
+			let currency = $el.find('[name*=-default_price] + .input-group-addon').text()
+			price = formatPrice(price, currency)
+		}
 
-        $el.find(".variation-name").text(var_name);
-        $el.find(".variation-price").text(price);
-        $el.find(".variation-timeframe").toggleClass("variation-icon-hidden", !(
-            !!$el.find("input[name$=-available_from_0]").val() ||
-            !!$el.find("input[name$=-available_until_0]").val()
-        ));
-        $el.find(".variation-name").toggleClass("variation-disabled", !(
-            !!$el.find("input[name$=-active]").prop("checked")
-        ));
-        $el.find(".variation-voucher").toggleClass("variation-icon-hidden", !(
-            !!$el.find("input[name$=-hide_without_voucher]").prop("checked")
-        ));
-        $el.find(".variation-membership").toggleClass("variation-icon-hidden", !(
-            !!$el.find("input[name$=-require_membership]").prop("checked")
-        ));
-        $el.find(".variation-warning").toggleClass("hidden", !(
-            $el.find(".alert-warning").length
-        ));
-        $el.find(".variation-error").toggleClass("hidden", !(
-            $el.find(".alert-danger, .has-error").length
-        ));
-        $el.find("input[name$=-limit_sales_channels]").each(function () {
-            $el.find(".variation-channel-" + $(this).val()).toggleClass("variation-icon-hidden", !(
-                (
-                    $(this).closest("[data-formset-form]").find("input[name$=-all_sales_channels]").prop("checked") ||
-                    $(this).prop("checked")
-                ) && (
-                    $("input[name=all_sales_channels]").prop("checked") ||
-                    $("input[name=limit_sales_channels][value=" + $(this).val() + "]").prop("checked")
-                )
-            ));
-        })
-    }
+		$el.find('.variation-name').text(var_name)
+		$el.find('.variation-price').text(price)
+		$el.find('.variation-timeframe').toggleClass('variation-icon-hidden', !(
+			!!$el.find('input[name$=-available_from_0]').val()
+			|| !!$el.find('input[name$=-available_until_0]').val()
+		))
+		$el.find('.variation-name').toggleClass('variation-disabled', !(
+			$el.find('input[name$=-active]').prop('checked')
+		))
+		$el.find('.variation-voucher').toggleClass('variation-icon-hidden', !(
+			$el.find('input[name$=-hide_without_voucher]').prop('checked')
+		))
+		$el.find('.variation-membership').toggleClass('variation-icon-hidden', !(
+			$el.find('input[name$=-require_membership]').prop('checked')
+		))
+		$el.find('.variation-warning').toggleClass('hidden', !(
+			$el.find('.alert-warning').length
+		))
+		$el.find('.variation-error').toggleClass('hidden', !(
+			$el.find('.alert-danger, .has-error').length
+		))
+		$el.find('input[name$=-limit_sales_channels]').each(function () {
+			$el.find('.variation-channel-' + $(this).val()).toggleClass('variation-icon-hidden', !(
+				(
+					$(this).closest('[data-formset-form]').find('input[name$=-all_sales_channels]').prop('checked')
+					|| $(this).prop('checked')
+				) && (
+					$('input[name=all_sales_channels]').prop('checked')
+					|| $('input[name=limit_sales_channels][value=' + $(this).val() + ']').prop('checked')
+				)
+			))
+		})
+	}
 
-    $("#item_variations [data-formset-form]").each(function () {
-        var $el = $(this);
-        update_variation_summary($el);
-        $(this).on("change dp.change", "input", function () {update_variation_summary($el)});
-    });
-    $("input[name=limit_sales_channels] input[name=all_sales_channels]").on("change", function() {
-        $("#item_variations [data-formset-form]").each(function () {
-            update_variation_summary($(this));
-        });
-    });
-    $("#item_variations").on("formAdded", "details", function (event) {
-        var $el = $(event.target);
-        update_variation_summary($el);
-        $(this).on("change dp.change", "input", function () {update_variation_summary($el)});
-        setup_collapsible_details($("#item_variations"));
-        form_handlers($(event.target));
-    });
-});
+	$('#item_variations [data-formset-form]').each(function () {
+		let $el = $(this)
+		update_variation_summary($el)
+		$(this).on('change dp.change', 'input', function () { update_variation_summary($el) })
+	})
+	$('input[name=limit_sales_channels] input[name=all_sales_channels]').on('change', function () {
+		$('#item_variations [data-formset-form]').each(function () {
+			update_variation_summary($(this))
+		})
+	})
+	$('#item_variations').on('formAdded', 'details', function (event) {
+		let $el = $(event.target)
+		update_variation_summary($el)
+		$(this).on('change dp.change', 'input', function () { update_variation_summary($el) })
+		setup_collapsible_details($('#item_variations'))
+		form_handlers($(event.target))
+	})
+})

src/pretix/static/pretixcontrol/js/ui/webauthn.js

@@ -1,32 +1,32 @@
-/*global $,u2f */
+/* global base64js */
 
-function b64enc(buf) {
-    return base64js.fromByteArray(buf)
-                   .replace(/\+/g, "-")
-                   .replace(/\//g, "_")
-                   .replace(/=/g, "");
+function b64enc (buf) {
+	return base64js.fromByteArray(buf)
+		.replace(/\+/g, '-')
+		.replace(/\//g, '_')
+		.replace(/=/g, '')
 }
 
-function b64RawEnc(buf) {
-    return base64js.fromByteArray(buf)
-    .replace(/\+/g, "-")
-    .replace(/\//g, "_");
+function b64RawEnc (buf) {
+	return base64js.fromByteArray(buf)
+		.replace(/\+/g, '-')
+		.replace(/\//g, '_')
 }
 
-function hexEncode(buf) {
-    return Array.from(buf)
-                .map(function(x) {
-                    return ("0" + x.toString(16)).substr(-2);
-				})
-                .join("");
+function hexEncode (buf) {
+	return Array.from(buf)
+		.map(function (x) {
+			return ('0' + x.toString(16)).substr(-2)
+		})
+		.join('')
 }
 
-async function fetch_json(url, options) {
-    const response = await fetch(url, options);
-    const body = await response.json();
-    if (body.fail)
-        throw body.fail;
-    return body;
+async function fetch_json (url, options) {
+	const response = await fetch(url, options)
+	const body = await response.json()
+	if (body.fail)
+		throw body.fail
+	return body
 }
 
 /**
@@ -35,27 +35,26 @@ async function fetch_json(url, options) {
  * @param {Object} credentialCreateOptionsFromServer
  */
 const transformCredentialCreateOptions = function (credentialCreateOptionsFromServer) {
-    let {challenge, user, excludeCredentials} = credentialCreateOptionsFromServer;
-    user.id = user.id.replace(/\_/g, "/").replace(/\-/g, "+");
-    user.id = Uint8Array.from(atob(user.id), c => c.charCodeAt(0));
+	let { challenge, user, excludeCredentials } = credentialCreateOptionsFromServer
+	user.id = user.id.replace(/_/g, '/').replace(/-/g, '+')
+	user.id = Uint8Array.from(atob(user.id), c => c.charCodeAt(0))
 
-    challenge = challenge.replace(/\_/g, "/").replace(/\-/g, "+");
-    challenge = Uint8Array.from(atob(challenge), c => c.charCodeAt(0));
+	challenge = challenge.replace(/_/g, '/').replace(/-/g, '+')
+	challenge = Uint8Array.from(atob(challenge), c => c.charCodeAt(0))
 
-    excludeCredentials = excludeCredentials.map(credentialDescriptor => {
-        let {id} = credentialDescriptor;
-        id = id.replace(/\_/g, "/").replace(/\-/g, "+");
-        id = Uint8Array.from(atob(id), c => c.charCodeAt(0));
-        return Object.assign({}, credentialDescriptor, {id});
-    });
+	excludeCredentials = excludeCredentials.map(credentialDescriptor => {
+		let { id } = credentialDescriptor
+		id = id.replace(/_/g, '/').replace(/-/g, '+')
+		id = Uint8Array.from(atob(id), c => c.charCodeAt(0))
+		return Object.assign({}, credentialDescriptor, { id })
+	})
 
-    const transformedCredentialCreateOptions = Object.assign(
-        {}, credentialCreateOptionsFromServer,
-        {challenge, user, excludeCredentials});
-
-    return transformedCredentialCreateOptions;
-};
+	const transformedCredentialCreateOptions = Object.assign(
+		{}, credentialCreateOptionsFromServer,
+		{ challenge, user, excludeCredentials })
 
+	return transformedCredentialCreateOptions
+}
 
 /**
  * Transforms the binary data in the credential into base64 strings
@@ -63,134 +62,132 @@ const transformCredentialCreateOptions = function (credentialCreateOptionsFromSe
  * @param {PublicKeyCredential} newAssertion
  */
 const transformNewAssertionForServer = (newAssertion) => {
-    const attObj = new Uint8Array(newAssertion.response.attestationObject);
-    const clientDataJSON = new Uint8Array(newAssertion.response.clientDataJSON);
-    const rawId = new Uint8Array(newAssertion.rawId);
-    const transports = newAssertion.response.getTransports();
-    const authenticatorAttachment = newAssertion.authenticatorAttachment;
+	const attObj = new Uint8Array(newAssertion.response.attestationObject)
+	const clientDataJSON = new Uint8Array(newAssertion.response.clientDataJSON)
+	const rawId = new Uint8Array(newAssertion.rawId)
+	const transports = newAssertion.response.getTransports()
+	const authenticatorAttachment = newAssertion.authenticatorAttachment
 
-    const registrationClientExtensions = newAssertion.getClientExtensionResults();
-
-    return {
-        id: newAssertion.id,
-        rawId: b64enc(rawId),
-        response: {
-            attestationObject: b64enc(attObj),
-            clientDataJSON: b64enc(clientDataJSON),
-            transports: transports,
-        },
-        type: newAssertion.type,
-        clientExtensionResults: JSON.stringify(registrationClientExtensions),
-        authenticatorAttachment: authenticatorAttachment,
-    };
-};
+	const registrationClientExtensions = newAssertion.getClientExtensionResults()
 
+	return {
+		id: newAssertion.id,
+		rawId: b64enc(rawId),
+		response: {
+			attestationObject: b64enc(attObj),
+			clientDataJSON: b64enc(clientDataJSON),
+			transports: transports,
+		},
+		type: newAssertion.type,
+		clientExtensionResults: JSON.stringify(registrationClientExtensions),
+		authenticatorAttachment: authenticatorAttachment,
+	}
+}
 
 const transformCredentialRequestOptions = (credentialRequestOptionsFromServer) => {
-    let {challenge, allowCredentials} = credentialRequestOptionsFromServer;
+	let { challenge, allowCredentials } = credentialRequestOptionsFromServer
 
-    challenge = challenge.replace(/\_/g, "/").replace(/\-/g, "+");
-    challenge = Uint8Array.from(atob(challenge), c => c.charCodeAt(0));
+	challenge = challenge.replace(/_/g, '/').replace(/-/g, '+')
+	challenge = Uint8Array.from(atob(challenge), c => c.charCodeAt(0))
 
-    allowCredentials = allowCredentials.map(credentialDescriptor => {
-        let {id} = credentialDescriptor;
-        id = id.replace(/\_/g, "/").replace(/\-/g, "+");
-        id = Uint8Array.from(atob(id), c => c.charCodeAt(0));
-        return Object.assign({}, credentialDescriptor, {id});
-    });
+	allowCredentials = allowCredentials.map(credentialDescriptor => {
+		let { id } = credentialDescriptor
+		id = id.replace(/_/g, '/').replace(/-/g, '+')
+		id = Uint8Array.from(atob(id), c => c.charCodeAt(0))
+		return Object.assign({}, credentialDescriptor, { id })
+	})
 
-    const transformedCredentialRequestOptions = Object.assign(
-        {},
-        credentialRequestOptionsFromServer,
-        {challenge, allowCredentials});
+	const transformedCredentialRequestOptions = Object.assign(
+		{},
+		credentialRequestOptionsFromServer,
+		{ challenge, allowCredentials })
 
-    return transformedCredentialRequestOptions;
-};
+	return transformedCredentialRequestOptions
+}
 
 /**
  * Encodes the binary data in the assertion into strings for posting to the server.
  * @param {PublicKeyCredential} newAssertion
  */
 const transformAssertionForServer = (newAssertion) => {
-    const authData = new Uint8Array(newAssertion.response.authenticatorData);
-    const clientDataJSON = new Uint8Array(newAssertion.response.clientDataJSON);
-    const rawId = new Uint8Array(newAssertion.rawId);
-    const sig = new Uint8Array(newAssertion.response.signature);
-    const userHandle = new Uint8Array(newAssertion.response.userHandle);
-    const assertionClientExtensions = newAssertion.getClientExtensionResults();
-    const authenticatorAttachment = newAssertion.authenticatorAttachment;
+	const authData = new Uint8Array(newAssertion.response.authenticatorData)
+	const clientDataJSON = new Uint8Array(newAssertion.response.clientDataJSON)
+	const rawId = new Uint8Array(newAssertion.rawId)
+	const sig = new Uint8Array(newAssertion.response.signature)
+	const userHandle = new Uint8Array(newAssertion.response.userHandle)
+	const assertionClientExtensions = newAssertion.getClientExtensionResults()
+	const authenticatorAttachment = newAssertion.authenticatorAttachment
 
-    return {
-        id: newAssertion.id,
-        rawId: b64enc(rawId),
-        type: newAssertion.type,
-        response: {
-            authenticatorData: b64RawEnc(authData),
-            clientDataJSON: b64RawEnc(clientDataJSON),
-            signature: b64RawEnc(sig),
-            userHandle: b64RawEnc(userHandle),
-        },
-        authenticatorAttachment: authenticatorAttachment,
-        clientExtensionResults: JSON.stringify(assertionClientExtensions)
-    };
-};
+	return {
+		id: newAssertion.id,
+		rawId: b64enc(rawId),
+		type: newAssertion.type,
+		response: {
+			authenticatorData: b64RawEnc(authData),
+			clientDataJSON: b64RawEnc(clientDataJSON),
+			signature: b64RawEnc(sig),
+			userHandle: b64RawEnc(userHandle),
+		},
+		authenticatorAttachment: authenticatorAttachment,
+		clientExtensionResults: JSON.stringify(assertionClientExtensions)
+	}
+}
 
-const startRegister = async (e) => {
-    const publicKeyCredentialCreateOptions = transformCredentialCreateOptions(JSON.parse($("#webauthn-enroll").text()));
+const startRegister = async () => {
+	const publicKeyCredentialCreateOptions = transformCredentialCreateOptions(JSON.parse($('#webauthn-enroll').text()))
 
-    // request the authenticator(s) to create a new credential keypair.
-    let credential;
-    try {
-        credential = await navigator.credentials.create({
-            publicKey: publicKeyCredentialCreateOptions
-        });
-    } catch (err) {
-        $("#webauthn-error").removeClass("hidden");
-        return console.error("Error creating credential:", err);
-    }
+	// request the authenticator(s) to create a new credential keypair.
+	let credential
+	try {
+		credential = await navigator.credentials.create({
+			publicKey: publicKeyCredentialCreateOptions
+		})
+	} catch (err) {
+		$('#webauthn-error').removeClass('hidden')
+		return console.error('Error creating credential:', err)
+	}
 
-    // we now have a new credential! We now need to encode the byte arrays
-    // in the credential into strings, for posting to our server.
-    const newAssertionForServer = transformNewAssertionForServer(credential);
+	// we now have a new credential! We now need to encode the byte arrays
+	// in the credential into strings, for posting to our server.
+	const newAssertionForServer = transformNewAssertionForServer(credential)
 
-    $("#webauthn-response").val(JSON.stringify(newAssertionForServer));
-    $("#webauthn-form").submit();
-};
+	$('#webauthn-response').val(JSON.stringify(newAssertionForServer))
+	$('#webauthn-form').submit()
+}
 
+const startLogin = async () => {
+	const transformedCredentialRequestOptions = transformCredentialRequestOptions(JSON.parse($('#webauthn-login').text()))
+	console.log(transformedCredentialRequestOptions)
 
-const startLogin = async (e) => {
-    const transformedCredentialRequestOptions = transformCredentialRequestOptions(JSON.parse($("#webauthn-login").text()));
-    console.log(transformedCredentialRequestOptions);
+	// request the authenticator to create an assertion signature using the
+	// credential private key
+	let assertion
+	try {
+		assertion = await navigator.credentials.get({
+			publicKey: transformedCredentialRequestOptions,
+		})
+	} catch (err) {
+		$('#webauthn-error').removeClass('hidden')
+		return console.error('Error when creating credential:', err)
+	}
 
-    // request the authenticator to create an assertion signature using the
-    // credential private key
-    let assertion;
-    try {
-        assertion = await navigator.credentials.get({
-            publicKey: transformedCredentialRequestOptions,
-        });
-    } catch (err) {
-        $("#webauthn-error").removeClass("hidden");
-        return console.error("Error when creating credential:", err);
-    }
+	// we now have an authentication assertion! encode the byte arrays contained
+	// in the assertion data as strings for posting to the server
+	const transformedAssertionForServer = transformAssertionForServer(assertion)
 
-    // we now have an authentication assertion! encode the byte arrays contained
-    // in the assertion data as strings for posting to the server
-    const transformedAssertionForServer = transformAssertionForServer(assertion);
-
-    // post the assertion to the server for verification.
-    $("input, select, textarea").prop("required", false);
-    $("#webauthn-response, #id_password").val(JSON.stringify(transformedAssertionForServer));
-    $("#webauthn-form").submit();
-};
+	// post the assertion to the server for verification.
+	$('input, select, textarea').prop('required', false)
+	$('#webauthn-response, #id_password').val(JSON.stringify(transformedAssertionForServer))
+	$('#webauthn-form').submit()
+}
 
 $(function () {
-    $("#webauthn-progress").hide();
-    if ($("#webauthn-enroll").length) {
-        $("#webauthn-progress").show();
-        startRegister();
-    } else if ($("#webauthn-login").length) {
-        $("#webauthn-progress").show();
-        startLogin();
-    }
-});
+	$('#webauthn-progress').hide()
+	if ($('#webauthn-enroll').length) {
+		$('#webauthn-progress').show()
+		startRegister()
+	} else if ($('#webauthn-login').length) {
+		$('#webauthn-progress').show()
+		startLogin()
+	}
+})

src/pretix/static/pretixpresale/js/csrfcookieretry.js

@@ -1,15 +1,15 @@
-document.addEventListener("DOMContentLoaded", () => {
-  const COOKIE_NAME = "__Host-pretix_csrftoken";
-  const RELOAD_FLAG = "csrfReloadPerformed";
+document.addEventListener('DOMContentLoaded', () => {
+	const COOKIE_NAME = '__Host-pretix_csrftoken'
+	const RELOAD_FLAG = 'csrfReloadPerformed'
 
-  const hasCookie = document.cookie
-    .split("; ")
-    .some((c) => c.startsWith(COOKIE_NAME + "="));
+	const hasCookie = document.cookie
+		.split('; ')
+		.some((c) => c.startsWith(COOKIE_NAME + '='))
 
-  if (!hasCookie && !sessionStorage.getItem(RELOAD_FLAG)) {
-    sessionStorage.setItem(RELOAD_FLAG, "1");
-    location.reload();
-  } else if (hasCookie && sessionStorage.getItem(RELOAD_FLAG)) {
-      sessionStorage.removeItem(RELOAD_FLAG);
-  }
-});
+	if (!hasCookie && !sessionStorage.getItem(RELOAD_FLAG)) {
+		sessionStorage.setItem(RELOAD_FLAG, '1')
+		location.reload()
+	} else if (hasCookie && sessionStorage.getItem(RELOAD_FLAG)) {
+		sessionStorage.removeItem(RELOAD_FLAG)
+	}
+})

src/pretix/static/pretixpresale/js/postmessage.js

@@ -1,10 +1,8 @@
-/*global $ */
-
 $(function () {
-    window.addEventListener("message", (event) => {
-        if (event.data && event.data.__process === "popup_close") {
-            window.close()
-        }
-    });
-    window.opener.postMessage(JSON.parse($("#postmessage").text()), $("#origin").text())
-})
+	window.addEventListener('message', (event) => {
+		if (event.data && event.data.__process === 'popup_close') {
+			window.close()
+		}
+	})
+	window.opener.postMessage(JSON.parse($('#postmessage').text()), $('#origin').text())
+})