Fix templates

Use JSON encoding for data-replace-with-qr
Remove more usages of |safe
2026-08-06 10:07:50 +00:00 · 2026-07-09 18:09:47 +02:00 · 2026-07-09 18:09:41 +02:00 · 2026-07-09 18:08:06 +02:00 · 2026-07-09 18:08:06 +02:00
75 changed files with 8192 additions and 40125 deletions
@@ -351,8 +351,7 @@ Endpoints

   :<json boolean error_reason: One of ``canceled``, ``invalid``, ``unpaid``, ``product``, ``rules``, ``revoked``,
                                ``incomplete``, ``already_redeemed``, ``blocked``, ``invalid_time``, or ``error``. Required.
-   :<json raw_barcode: The raw barcode or identifier you scanned. Required.
-   :<json raw_source_type: The type of medium you scanned, defaults to ``barcode``. Optional.
+   :<json raw_barcode: The raw barcode you scanned. Required.
   :<json datetime: Date and time of the scan. Optional.
   :<json type: Type of scan, defaults to ``"entry"``.
   :<json position: Internal ID of an order position you matched. Optional.
@@ -41,9 +41,9 @@ dependencies = [
  "django-bootstrap3==26.1",
  "django-compressor==4.6.0",
  "django-countries==8.2.*",
-  "django-filter==26.1",
+  "django-filter==25.1",
  "django-formset-js-improved==0.5.0.5",
-  "django-formtools==2.7",
+  "django-formtools==2.6.1",
  "django-hierarkey==2.0.*,>=2.0.1",
  "django-hijack==3.7.*",
  "django-i18nfield==1.11.*",
@@ -94,7 +94,7 @@ dependencies = [
  "redis==7.4.*",
  "reportlab==5.0.*",
  "requests==2.34.*",
-  "sentry-sdk==2.65.*",
+  "sentry-sdk==2.64.*",
  "sepaxml==2.7.*",
  "stripe==7.9.*",
  "text-unidecode==1.*",
@@ -20,7 +20,6 @@
 # <https://www.gnu.org/licenses/>.
 #
 import json
-import re

 from django.db.models import prefetch_related_objects
 from rest_framework import serializers
@@ -136,30 +135,3 @@ class SalesChannelMigrationMixin:
        else:
            value["sales_channels"] = value["limit_sales_channels"]
        return value
-
-
-class CompatDecimalField(serializers.DecimalField):
-    """
-    Historically, pretix recorded tax rates as decimals with two places. Today, pretix supports tax rates with up to
-    four places. Since our API outputs decimals with the stored precision, this would have changed the API output from
-    "19.00" to "19.0000" without warning. While this is semantically the same thing, we need to assume some pretix API
-    users might run into trouble, either because they treat the value as a string and then map something
-    (e.g. ``if tax_rate == "19.00"``) or process it with a language where this is a significant difference. For example,
-    while in Python ``Decimal("19.00") == Decimal("19.0000")`` is true, in Java
-    ``(new BigDecimal("19.00")).equals(new BigDecimal("19.0000"))`` is false and only
-    ``(new BigDecimal("19.00")).compareTo(new BigDecimal("19.0000")) == 0`` is true.
-
-    Therefore, we stay backwards compatible by outputting two decimal places *as long as the trailing digits are zero-valued.
-    """
-
-    regex = re.compile(r"^([0-9]+\.[0-9]{2})0+$")
-
-    def to_representation(self, value):
-        if self.localize:
-            raise ValueError("localization not supported")
-        value = super().to_representation(value)
-        if value and "." not in value:
-            return f"{value}.00"
-        if m := self.regex.match(value):
-            return m.group(1)
-        return value
@@ -48,7 +48,7 @@ from rest_framework.fields import ChoiceField, Field
 from rest_framework.relations import SlugRelatedField

 from pretix.api.serializers import (
-    CompatDecimalField, CompatibleJSONField, SalesChannelMigrationMixin,
+    CompatibleJSONField, SalesChannelMigrationMixin,
 )
 from pretix.api.serializers.fields import PluginsField
 from pretix.api.serializers.i18n import I18nAwareModelSerializer
@@ -681,7 +681,6 @@ class TaxRuleSerializer(CountryFieldMixin, I18nAwareModelSerializer):
        required=False,
        allow_null=True,
    )
-    rate = CompatDecimalField(max_digits=7, decimal_places=4)

    class Meta:
        model = TaxRule
@@ -42,9 +42,7 @@ from django.utils.functional import cached_property, lazy
 from django.utils.translation import gettext_lazy as _
 from rest_framework import serializers

-from pretix.api.serializers import (
-    CompatDecimalField, SalesChannelMigrationMixin,
-)
+from pretix.api.serializers import SalesChannelMigrationMixin
 from pretix.api.serializers.event import MetaDataField
 from pretix.api.serializers.fields import UploadedFileField
 from pretix.api.serializers.i18n import I18nAwareModelSerializer
@@ -278,10 +276,10 @@ class ItemAddOnSerializer(serializers.ModelSerializer):
        return value


-class ItemTaxRateField(CompatDecimalField):
+class ItemTaxRateField(serializers.Field):
    def to_representation(self, i):
        if i.tax_rule:
-            return super().to_representation(Decimal(i.tax_rule.rate))
+            return str(Decimal(i.tax_rule.rate))
        else:
            return str(Decimal('0.00'))

@@ -291,7 +289,7 @@ class ItemSerializer(SalesChannelMigrationMixin, I18nAwareModelSerializer):
    bundles = InlineItemBundleSerializer(many=True, required=False)
    variations = InlineItemVariationSerializer(many=True, required=False)
    program_times = InlineItemProgramTimeSerializer(many=True, required=False)
-    tax_rate = ItemTaxRateField(source='*', read_only=True, max_digits=7, decimal_places=4)
+    tax_rate = ItemTaxRateField(source='*', read_only=True)
    meta_data = MetaDataField(required=False, source='*')
    picture = UploadedFileField(required=False, allow_null=True, allowed_types=(
        'image/png', 'image/jpeg', 'image/gif'
@@ -41,7 +41,7 @@ from rest_framework.exceptions import ValidationError
 from rest_framework.relations import SlugRelatedField
 from rest_framework.reverse import reverse

-from pretix.api.serializers import CompatDecimalField, CompatibleJSONField
+from pretix.api.serializers import CompatibleJSONField
 from pretix.api.serializers.event import SubEventSerializer
 from pretix.api.serializers.forms import form_field_to_serializer_field
 from pretix.api.serializers.i18n import I18nAwareModelSerializer
@@ -52,7 +52,6 @@ from pretix.api.signals import order_api_details, orderposition_api_details
 from pretix.base.decimal import round_decimal
 from pretix.base.i18n import language
 from pretix.base.invoicing.transmission import get_transmission_types
-from pretix.base.media import MEDIA_TYPES
 from pretix.base.models import (
    CachedFile, Checkin, Customer, Device, GiftCard, Invoice, InvoiceAddress,
    InvoiceLine, Item, ItemVariation, Order, OrderPosition, Question,
@@ -382,7 +381,6 @@ class PrintLogSerializer(serializers.ModelSerializer):
 class FailedCheckinSerializer(I18nAwareModelSerializer):
    error_reason = serializers.ChoiceField(choices=Checkin.REASONS, required=True, allow_null=False)
    raw_barcode = serializers.CharField(required=True, allow_null=False)
-    raw_source_type = serializers.ChoiceField(choices=[(k, v) for k, v in MEDIA_TYPES.items()], default='barcode')
    position = serializers.PrimaryKeyRelatedField(queryset=OrderPosition.all.none(), required=False, allow_null=True)
    raw_item = serializers.PrimaryKeyRelatedField(queryset=Item.objects.none(), required=False, allow_null=True)
    raw_variation = serializers.PrimaryKeyRelatedField(queryset=ItemVariation.objects.none(), required=False, allow_null=True)
@@ -392,7 +390,7 @@ class FailedCheckinSerializer(I18nAwareModelSerializer):
    class Meta:
        model = Checkin
        fields = ('error_reason', 'error_explanation', 'raw_barcode', 'raw_item', 'raw_variation',
-                  'raw_subevent', 'raw_source_type', 'nonce', 'datetime', 'type', 'position')
+                  'raw_subevent', 'nonce', 'datetime', 'type', 'position')

    def __init__(self, *args, **kwargs):
        super().__init__(*args, **kwargs)
@@ -593,7 +591,6 @@ class OrderPositionSerializer(I18nAwareModelSerializer):
    country = CompatibleCountryField(source='*')
    attendee_name = serializers.CharField(required=False)
    plugin_data = OrderPositionPluginDataField(source='*', allow_null=True, read_only=True)
-    tax_rate = CompatDecimalField(max_digits=7, decimal_places=4)

    class Meta:
        list_serializer_class = OrderPositionListSerializer
@@ -750,8 +747,6 @@ class OrderPaymentDateField(serializers.DateField):


 class OrderFeeSerializer(I18nAwareModelSerializer):
-    tax_rate = CompatDecimalField(max_digits=7, decimal_places=4)
-
    class Meta:
        model = OrderFee
        fields = ('id', 'fee_type', 'value', 'description', 'internal_type', 'tax_rate', 'tax_value', 'tax_rule',
@@ -1916,7 +1911,6 @@ class InlineInvoiceLineSerializer(I18nAwareModelSerializer):
    position = LinePositionField(read_only=True)
    event_date_from = serializers.DateTimeField(read_only=True, source="period_start")
    event_date_to = serializers.DateTimeField(read_only=True, source="period_end")
-    tax_rate = CompatDecimalField(max_digits=7, decimal_places=4)

    class Meta:
        model = InvoiceLine
@@ -2000,7 +1994,6 @@ class BlockedTicketSecretSerializer(I18nAwareModelSerializer):

 class TransactionSerializer(I18nAwareModelSerializer):
    order = serializers.SlugRelatedField(slug_field="code", read_only=True)
-    tax_rate = CompatDecimalField(max_digits=7, decimal_places=4)

    class Meta:
        model = Transaction
@@ -1116,13 +1116,6 @@ class BaseQuestionsForm(forms.Form):
            if q.dependency_question_id and not question_is_visible(q.dependency_question_id, q.dependency_values) and answer is not None:
                d['question_%d' % q.pk] = None

-        # Strip False answers to required yes/no questions even if all_optional is set, as our data model assumes that
-        # required yes/no questions can only be answered with yes
-        for q in question_cache.values():
-            if q.required and q.type == Question.TYPE_BOOLEAN:
-                if 'question_%d' % q.pk in d and d['question_%d' % q.pk] is False:
-                    del d['question_%d' % q.pk]
-
        return d


@@ -266,22 +266,6 @@ def _merge_csp(a, b):


 class SecurityMiddleware(MiddlewareMixin):
-    SAFE_TYPES = (
-        # CSP policies are only used for:
-        # - HTML and SVG in top-level contexts
-        # - SVG or JS Workers delivered in embedded contexts
-        # See: https://www.w3.org/TR/CSP2/#which-policy-applies
-        # Therefore, we can save bandwidth on not including our (sometimes huge) policy
-        # on API responses or CSS. We do however include it with other types as a precaution
-        # (whitelist instead of blacklist) and we also do not whitelist JavaScript in
-        # we ever add service workers to not break the protection of this feature:
-        # https://www.w3.org/TR/CSP2/#sandboxing-and-workers
-        'application/json',
-        'text/css',
-        # We used to skip CSP for PDF since it was necessary for inline previews in Safari,
-        # but at the moment it does not seem to be an issue to just send it.
-    )
-
    def process_response(self, request, resp):
        if settings.DEBUG and resp.status_code >= 400:
            # Don't use CSP on debug error page as it breaks of Django's fancy error
@@ -293,11 +277,6 @@ class SecurityMiddleware(MiddlewareMixin):
        # https://github.com/pretix/pretix/issues/765
        resp['P3P'] = 'CP=\"ALL DSP COR CUR ADM TAI OUR IND COM NAV INT\"'

-        if "Content-Type" in resp and resp["Content-Type"].split(";")[0] in self.SAFE_TYPES:
-            if 'Content-Security-Policy' in resp:
-                del resp['Content-Security-Policy']
-            return resp
-
        if not getattr(resp, '_csp_ignore', False):
            resp['Content-Security-Policy'] = _render_csp(self._build_csp(request, resp))
        elif 'Content-Security-Policy' in resp:
@@ -314,7 +293,7 @@ class SecurityMiddleware(MiddlewareMixin):
            'object-src': ["'none'"],
            'frame-src': ['{static}'],
            'style-src': ["{static}", "{media}"],
-            'connect-src': ["{static}", "{dynamic}", "{media}"],
+            'connect-src': ["{dynamic}", "{media}"],
            'img-src': ["{static}", "{media}", "data:"],
            'font-src': ["{static}"],
            'media-src': ["{static}", "data:"],
@@ -1,48 +0,0 @@
-# Generated by Django 5.2.12 on 2026-04-15 20:10
-
-from decimal import Decimal
-
-from django.db import migrations, models
-
-import pretix.helpers.models
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ('pretixbase', '0303_alter_order_organizer_alter_orderposition_organizer'),
-    ]
-
-    operations = [
-        migrations.AlterField(
-            model_name='cartposition',
-            name='tax_rate',
-            field=pretix.helpers.models.NormalizedDecimalField(decimal_places=4, default=Decimal('0'), max_digits=7),
-        ),
-        migrations.AlterField(
-            model_name='invoiceline',
-            name='tax_rate',
-            field=pretix.helpers.models.NormalizedDecimalField(decimal_places=4, default=Decimal('0'), max_digits=7),
-        ),
-        migrations.AlterField(
-            model_name='orderfee',
-            name='tax_rate',
-            field=pretix.helpers.models.NormalizedDecimalField(decimal_places=4, max_digits=7),
-        ),
-        migrations.AlterField(
-            model_name='orderposition',
-            name='tax_rate',
-            field=pretix.helpers.models.NormalizedDecimalField(decimal_places=4, max_digits=7),
-        ),
-        migrations.AlterField(
-            model_name='transaction',
-            name='tax_rate',
-            field=pretix.helpers.models.NormalizedDecimalField(decimal_places=4, max_digits=7),
-        ),
-        migrations.AlterField(
-            model_name='taxrule',
-            name='rate',
-            field=pretix.helpers.models.NormalizedDecimalField(decimal_places=4, max_digits=7),
-        ),
-
-    ]
@@ -649,7 +649,7 @@ class Event(EventMixin, LoggedModel):
    is_remote = models.BooleanField(
        default=False,
        verbose_name=_("This event is remote or partially remote."),
-        help_text=_("This will be used to let users know if the event is in a different timezone, and to let us calculate the local time of a user."),
+        help_text=_("This will be used to let users know if the event is in a different timezone and let’s us calculate users’ local times."),
    )
    geo_lat = models.FloatField(
        verbose_name=_("Latitude"),
@@ -49,7 +49,6 @@ from django_scopes import ScopedManager

 from pretix.base.settings import COUNTRIES_WITH_STATE_IN_ADDRESS
 from pretix.helpers.countries import FastCountryField
-from pretix.helpers.models import NormalizedDecimalField


 def invoice_filename(instance, filename: str) -> str:
@@ -451,7 +450,7 @@ class InvoiceLine(models.Model):
    description = models.TextField()
    gross_value = models.DecimalField(max_digits=13, decimal_places=2)
    tax_value = models.DecimalField(max_digits=13, decimal_places=2, default=Decimal('0.00'))
-    tax_rate = NormalizedDecimalField(max_digits=7, decimal_places=4, default=Decimal('0'))
+    tax_rate = models.DecimalField(max_digits=7, decimal_places=2, default=Decimal('0.00'))
    tax_name = models.CharField(max_length=190)
    tax_code = models.CharField(max_length=190, null=True, blank=True)
    subevent = models.ForeignKey('SubEvent', null=True, blank=True, on_delete=models.PROTECT)
@@ -87,7 +87,6 @@ from pretix.base.timemachine import time_machine_now

 from ...helpers import OF_SELF
 from ...helpers.countries import CachedCountries, FastCountryField
-from ...helpers.models import NormalizedDecimalField
 from ...helpers.names import build_name
 from ...testutils.middleware import debugflags_var
 from ._transactions import (
@@ -2355,8 +2354,8 @@ class OrderFee(RoundingCorrectionMixin, models.Model):
    )
    description = models.CharField(max_length=190, blank=True)
    internal_type = models.CharField(max_length=255, blank=True)
-    tax_rate = NormalizedDecimalField(
-        max_digits=7, decimal_places=4,
+    tax_rate = models.DecimalField(
+        max_digits=7, decimal_places=2,
        verbose_name=_('Tax rate')
    )
    tax_rule = models.ForeignKey(
@@ -2552,8 +2551,8 @@ class OrderPosition(AbstractPosition):
        max_digits=13, decimal_places=2, null=True, blank=True,
    )

-    tax_rate = NormalizedDecimalField(
-        max_digits=7, decimal_places=4,
+    tax_rate = models.DecimalField(
+        max_digits=7, decimal_places=2,
        verbose_name=_('Tax rate')
    )
    tax_rule = models.ForeignKey(
@@ -3071,8 +3070,8 @@ class Transaction(models.Model):
    price_includes_rounding_correction = models.DecimalField(
        max_digits=13, decimal_places=2, default=Decimal("0.00")
    )
-    tax_rate = NormalizedDecimalField(
-        max_digits=7, decimal_places=4,
+    tax_rate = models.DecimalField(
+        max_digits=7, decimal_places=2,
        verbose_name=_('Tax rate')
    )
    tax_rule = models.ForeignKey(
@@ -3187,8 +3186,8 @@ class CartPosition(AbstractPosition):
        verbose_name=_("Limit for extending expiration date"),
        null=True
    )
-    tax_rate = NormalizedDecimalField(
-        max_digits=7, decimal_places=4, default=Decimal('0'),
+    tax_rate = models.DecimalField(
+        max_digits=7, decimal_places=2, default=Decimal('0.00'),
        verbose_name=_('Tax rate')
    )
    tax_code = models.CharField(
@@ -40,7 +40,6 @@ from pretix.base.decimal import round_decimal
 from pretix.base.models.base import LoggedModel
 from pretix.base.templatetags.money import money_filter
 from pretix.helpers.countries import FastCountryField
-from pretix.helpers.models import NormalizedDecimalField


 class TaxedPrice:
@@ -336,9 +335,9 @@ class TaxRule(LoggedModel):
        max_length=190,
        choices=TAX_CODE_LISTS,
    )
-    rate = NormalizedDecimalField(
-        max_digits=7,
-        decimal_places=4,
+    rate = models.DecimalField(
+        max_digits=10,
+        decimal_places=2,
        validators=[
            MaxValueValidator(
                limit_value=Decimal("100.00"),
@@ -936,7 +936,7 @@ class BasePaymentProvider:
        """
        Will be called if the *event administrator* views the details of a payment.

-        It should return HTML code containing information regarding the current payment
+        It should return a SafeString containing HTML code, with information regarding the current payment
        status and, if applicable, next steps.

        The default implementation returns an empty string.
@@ -961,7 +961,7 @@ class BasePaymentProvider:
        """
        Will be called if the *event administrator* views the details of a refund.

-        It should return HTML code containing information regarding the current refund
+        It should return a SafeString containing HTML code, with information regarding the current refund
        status and, if applicable, next steps.

        The default implementation returns an empty string.
@@ -1706,58 +1706,6 @@ class GiftCardPayment(BasePaymentProvider):
        )


-class BaseHistoricalPaymentProvider(BasePaymentProvider):
-    """
-    Base class for payment providers that no longer exist but can't be deleted to make sure historical
-    payments are shown correctly.
-
-    Subclasses are recommended to only implement:
-        - identifier
-        - verbose_name
-        - public_name
-    - payment_control_render
-    - payment_control_render_short
-    - refund_control_render
-    - refund_control_render_short
-    - render_invoice_text
-    - render_invoice_stamp
-    - api_payment_details
-    - api_refund_details
-    - shred_payment_info
-    - matching_id
-    - refund_matching_id
-    """
-
-    @property
-    def is_enabled(self) -> bool:
-        return False
-
-    @property
-    def settings_form_fields(self) -> dict:
-        return {}
-
-    def is_allowed(self, request: HttpRequest, total: Decimal=None) -> bool:
-        return False
-
-    def payment_is_valid_session(self, request: HttpRequest, payment: OrderPayment):
-        return False
-
-    def order_change_allowed(self, order: Order, request: HttpRequest=None) -> bool:
-        return False
-
-    def payment_refund_supported(self, payment: OrderPayment) -> bool:
-        return False
-
-    def payment_partial_refund_supported(self, payment: OrderPayment) -> bool:
-        return False
-
-    def execute_payment(self, request: HttpRequest, payment: OrderPayment):
-        raise PaymentException(_("This payment provider exists for historical purposes only and is no longer usable."))
-
-    def execute_refund(self, refund: OrderRefund):
-        raise PaymentException(_("This payment provider exists for historical purposes only and is no longer usable."))
-
-
@receiver(register_payment_providers, dispatch_uid="payment_free")
 def register_payment_provider(sender, **kwargs):
    return [FreeOrderProvider, BoxOfficeProvider, OffsettingProvider, ManualPayment, GiftCardPayment]
@@ -26,8 +26,6 @@ from babel.numbers import format_currency
 from django import template
 from django.conf import settings
 from django.template.defaultfilters import floatformat
-from django.utils import formats
-from django.utils.safestring import mark_safe

 from pretix.base.i18n import get_babel_locale

@@ -84,19 +82,3 @@ def money_numberfield_filter(value: Decimal, arg=''):

    places = settings.CURRENCY_PLACES.get(arg, 2)
    return str(value.quantize(Decimal('1') / 10 ** places, ROUND_HALF_UP))
-
-
-@register.filter(is_safe=True)
-def tax_rate_format(number):
-    """
-    Display a Decimal to its significant decimal places, used for tax rates.
-    """
-    assert isinstance(number, Decimal)
-    return mark_safe(
-        formats.number_format(
-            number.normalize(),
-            -number.as_tuple().exponent,
-            use_l10n=True,
-            force_grouping=False,
-        )
-    )
@@ -27,11 +27,11 @@ from django.template import TemplateDoesNotExist, loader
 from django.template.loader import get_template
 from django.utils.functional import Promise
 from django.utils.translation import gettext as _
+from django.views.decorators.csrf import requires_csrf_token
 from sentry_sdk import last_event_id

 from pretix.base.i18n import language
 from pretix.base.middleware import get_language_from_request
-from pretix.multidomain.middlewares import requires_csrf_token


 def csrf_failure(request, reason=""):
@@ -59,7 +59,7 @@ def on_task_prerun(sender, task_id, task, **kwargs):
    from pretix.helpers.logs import local

    local.request_id = task_id
-    if task.request.headers and "X-Pretix-Trace" in task.request.headers:
+    if "X-Pretix-Trace" in task.request.headers:
        local.trace = task.request.headers["X-Pretix-Trace"].split(" ")
    else:
        local.trace = []
@@ -3,6 +3,7 @@
 {% load i18n %}
 {% load static %}
 {% load compress %}
+{% load escapejson %}
 {% block content %}
    <form class="form-signin" action="" method="post" id="webauthn-form">
        {% csrf_token %}
@@ -30,8 +31,7 @@
    </form>
    {% if jsondata %}
        <script type="text/json" id="webauthn-login">
-            {{ jsondata|safe }}
-
+            {{ jsondata|escapejson }}
        </script>
    {% endif %}
    {% compress js %}
@@ -50,46 +50,6 @@
                        {% endblocktrans %}
                    </div>
                {% endif %}
-                {% if dkim_warning %}
-                    <div class="alert alert-danger">
-                        <p>
-                            {{ dkim_warning }}
-                        </p>
-                        <p>
-                            {% trans "Your new DKIM record should be set up as a CNAME record like this:" %}
-                        </p>
-                        <pre><code>{{ dkim_hostname }}  CNAME  {{ dkim_cname }}</code></pre>
-                        <p>
-                            {% trans "Please keep in mind that updates to DNS might require multiple hours to take effect." %}
-                        </p>
-                    </div>
-                {% elif dkim_cname %}
-                    <div class="alert alert-success">
-                        {% blocktrans trimmed %}
-                            We found a DKIM record on your domain for this system. Great!
-                        {% endblocktrans %}
-                    </div>
-                {% endif %}
-                {% if dmarc_warning %}
-                    <div class="alert alert-danger">
-                        <p>
-                            {{ dmarc_warning }}
-                        </p>
-                        <p>
-                            {% trans "Your new DMARC record could look like this:" %}
-                        </p>
-                        <pre><code>_dmarc.{{ hostname }}  TXT  "v=DMARC1; p=quarantine; sp=none; adkim=r; aspf=r;"</code></pre>
-                        <p>
-                            {% trans "Please keep in mind that updates to DNS might require multiple hours to take effect." %}
-                        </p>
-                    </div>
-                {% elif dkim_cname %}
-                    <div class="alert alert-success">
-                        {% blocktrans trimmed %}
-                            We found a DMARC record on your domain for this system. Great!
-                        {% endblocktrans %}
-                    </div>
-                {% endif %}
                {% if verification %}
                    <h3>{% trans "Verification" %}</h3>
                    <p>
@@ -110,7 +70,7 @@
            </div>
        </div>

-        {% if spf_warning or dkim_warning or dmarc_warning %}
+        {% if spf_warning %}
            <div class="form-group submit-group">
                <a href="" class="btn btn-default btn-save">
                    {% trans "Cancel" %}
@@ -156,11 +156,11 @@
                                    <br/>
                                    <small class="text-muted">
                                        {% if not i.tax_rule.price_includes_tax %}
-                                            {% blocktrans trimmed with rate=i.tax_rule.rate|tax_rate_format taxname=i.tax_rule.name %}
+                                            {% blocktrans trimmed with rate=i.tax_rule.rate|floatformat:-2 taxname=i.tax_rule.name %}
                                                <strong>plus</strong> {{ rate }}% {{ taxname }}
                                            {% endblocktrans %}
                                        {% else %}
-                                            {% blocktrans trimmed with rate=i.tax_rule.rate|tax_rate_format taxname=i.tax_rule.name|default:s_taxes %}
+                                            {% blocktrans trimmed with rate=i.tax_rule.rate|floatformat:-2 taxname=i.tax_rule.name|default:s_taxes %}
                                                incl. {{ rate }}% {{ taxname }}
                                            {% endblocktrans %}
                                        {% endif %}
@@ -2,6 +2,7 @@
 {% load i18n %}
 {% load bootstrap3 %}
 {% load money %}
+{% load wrap_in %}
 {% block title %}
    {% trans "Cancel order" %}
 {% endblock %}
@@ -26,7 +27,7 @@
        {% if form.cancellation_fee %}
            {% if fee %}
                {% with fee|money:request.event.currency as f %}
-                    <p>{% blocktrans trimmed with fee="<strong>"|add:f|add:"</strong>"|safe %}
+                    <p>{% blocktrans trimmed with fee=f|wrap_in:"strong" %}
                        The configured cancellation fee for a self-service cancellation would be {{ fee }} for this
                        order, but for a cancellation performed by you, you need to set the cancellation fee here:
                    {% endblocktrans %}</p>
@@ -705,7 +705,7 @@
                                    {% if line.tax_rate %}
                                        <br/>
                                        <small>
-                                            {% blocktrans trimmed with rate=line.tax_rate|tax_rate_format taxname=line.tax_rule.name|default:s_taxes %}
+                                            {% blocktrans trimmed with rate=line.tax_rate|floatformat:-2 taxname=line.tax_rule.name|default:s_taxes %}
                                                <strong>plus</strong> {{ rate }}% {{ taxname }}
                                            {% endblocktrans %}
                                        </small>
@@ -715,7 +715,7 @@
                                    {% if line.tax_rate and line.price %}
                                        <br/>
                                        <small>
-                                            {% blocktrans trimmed with rate=line.tax_rate|tax_rate_format taxname=line.tax_rule.name|default:s_taxes %}
+                                            {% blocktrans trimmed with rate=line.tax_rate|floatformat:-2 taxname=line.tax_rule.name|default:s_taxes %}
                                                incl. {{ rate }}% {{ taxname }}
                                            {% endblocktrans %}
                                        </small>
@@ -755,7 +755,7 @@
                                    {% if fee.tax_rate %}
                                        <br/>
                                        <small>
-                                            {% blocktrans trimmed with rate=fee.tax_rate|tax_rate_format taxname=fee.tax_rule.name|default:s_taxes %}
+                                            {% blocktrans trimmed with rate=fee.tax_rate|floatformat:-2 taxname=fee.tax_rule.name|default:s_taxes %}
                                                <strong>plus</strong> {{ rate }}% {{ taxname }}
                                            {% endblocktrans %}
                                        </small>
@@ -765,7 +765,7 @@
                                    {% if fee.tax_rate %}
                                        <br/>
                                        <small>
-                                            {% blocktrans trimmed with rate=fee.tax_rate|tax_rate_format taxname=fee.tax_rule.name|default:s_taxes %}
+                                            {% blocktrans trimmed with rate=fee.tax_rate|floatformat:-2 taxname=fee.tax_rule.name|default:s_taxes %}
                                                incl. {{ rate }}% {{ taxname }}
                                            {% endblocktrans %}
                                        </small>
@@ -903,7 +903,7 @@
                                            <tr>
                                                <td colspan="1"></td>
                                                <td colspan="5">
-                                                    {{ p.html_info|safe }}
+                                                    {{ p.html_info }}
                                                    {% if staff_session %}
                                                        <p>
                                                            <a href="" class="btn btn-default btn-xs admin-only" data-expandpayment data-id="{{ p.pk }}">
@@ -1018,7 +1018,7 @@
                                                            </dl>
                                                        {% endif %}
                                                        {% if r.html_info %}
-                                                            {{ r.html_info|safe }}
+                                                            {{ r.html_info }}
                                                        {% endif %}
                                                        {% if staff_session %}
                                                            <p>
@@ -2,6 +2,7 @@
 {% load i18n %}
 {% load static %}
 {% load bootstrap3 %}
+{% load escapejson %}
 {% block inner %}
    <h1>{% trans "Connect to device:" %} {{ device.name }}</h1>

@@ -18,7 +19,7 @@
                {% trans "Open the app that you want to connect and optionally reset it to the original state." %}
            </li>
            <li>{% trans "Scan the following configuration code:" %}<br><br>
-                <script type="text/json" data-replace-with-qr>{{ qrdata|safe }}</script><br>
+                <script type="application/json" data-replace-with-qr>{{ qrdata|escapejson_dumps }}</script><br>
                {% trans "If your app/device does not support scanning a QR code, you can also enter the following information:" %}
                <br>
                <strong>{% trans "System URL:" %}</strong> <code id="system_url">{{ settings.SITE_URL }}</code>
@@ -137,15 +137,6 @@
                            </td>
                            <td>
                                {{ d.software_brand|default_if_none:"" }} {{ d.software_version|default_if_none:"" }}
-                                {% if staff_session %}
-                                    <details class="admin-only">
-                                        <summary>
-                                            <i class="fa fa-angle-down collapse-indicator"></i>
-                                            {% trans "Details" %}
-                                        </summary>
-                                        <pre class="admin-only">{{ d.info|pprint }}</pre>
-                                    </details>
-                                {% endif %}
                            </td>
                            <td>
                                {% if d.initialized %}
@@ -560,10 +560,11 @@
            </div>
        </div>
    </div>
+    <script type="text/plain" id="schema-url">{% static "schema/pdf-layout.schema.json" %}</script>
    <script type="text/javascript" src="{% static "pdfjs/pdf.js" %}"></script>
+    <script type="text/javascript" src="{% static "ajv/ajv2020.bundle.min.js" %}"></script>
    <script type="text/javascript" src="{% static "fabric/fabric.min.js" %}"></script>
    <script type="text/javascript" src="{% static "pretixcontrol/js/ui/editor.js" %}"></script>
-    <script type="text/javascript" src="{% static "schema/pdf-layout.validate.js" %}"></script>
    <img src="{% static 'pretixpresale/pdf/powered_by_pretix_dark.png' %}" id="poweredby-dark" class="sr-only">
    <img src="{% static 'pretixpresale/pdf/powered_by_pretix_white.png' %}" id="poweredby-white" class="sr-only">
    {% for family, styles in fonts.items %}
@@ -1,6 +1,7 @@
 {% extends "pretixcontrol/base.html" %}
 {% load i18n %}
 {% load bootstrap3 %}
+{% load escapejson %}
 {% block title %}{% trans "Add a two-factor authentication device" %}{% endblock %}
 {% block content %}
    <h1>{% trans "Add a two-factor authentication device" %}</h1>
@@ -32,7 +33,7 @@
        </li>
        <li>
            {% trans "Add a new account to the app by scanning the following barcode:" %}
-            <div class="qrcode-canvas" data-qrdata="#qrdata"></div>
+            <script type="application/json" data-replace-with-qr>{{ qrdata|escapejson_dumps }}</script>
            <p>
                <a data-toggle="collapse" href="#no_scan">
                    {% trans "Can't scan the barcode?" %}
@@ -81,9 +82,4 @@
        </li>
    </ol>

-    <script type="text/json" id="qrdata">
-        {{ qrdata|safe }}
-
-
-    </script>
 {% endblock %}
@@ -3,6 +3,7 @@
 {% load bootstrap3 %}
 {% load static %}
 {% load compress %}
+{% load escapejson %}
 {% block title %}{% trans "Add a two-factor authentication device" %}{% endblock %}
 {% block content %}
    <h1>{% trans "Add a two-factor authentication device" %}</h1>
@@ -26,9 +27,7 @@
        {% trans "Device registration failed." %}
    </div>
    <script type="text/json" id="webauthn-enroll">
-        {{ jsondata|safe }}
-
-
+        {{ jsondata|escapejson }}
    </script>
    {% compress js %}
        <script type="text/javascript" src="{% static "pretixcontrol/js/base64js.js" %}"></script>
@@ -3,6 +3,7 @@
 {% load bootstrap3 %}
 {% load compress %}
 {% load static %}
+{% load escapejson %}
 {% block content %}
    <form class="form-signin" id="webauthn-form" action="" method="post">
        {% csrf_token %}
@@ -43,7 +44,7 @@

        {% if jsondata %}
            <script type="text/json" id="webauthn-login">
-            {{ jsondata|safe }}
+                {{ jsondata|escapejson }}
            </script>
        {% endif %}
        {% compress js %}
@@ -243,8 +243,7 @@ def invite(request, token):
    if request.user.is_authenticated:
        if inv.team.members.filter(pk=request.user.pk).exists():
            messages.error(request, _('You cannot accept the invitation for "{}" as you already are part of '
-                                      'this team. If you want to add a different user or create a new account, '
-                                      'log out and click the invitation link again.').format(inv.team.name))
+                                      'this team.').format(inv.team.name))
            return redirect('control:index')
        else:
            with transaction.atomic():
@@ -952,12 +952,7 @@ class MailSettingsRendererPreview(MailSettingsPreview):
                    context=context,
                )
                r = HttpResponse(v, content_type='text/html')
-                r['Content-Security-Policy'] = (
-                    # Plugin-provided email templates will contain inline styles or remote images
-                    # but emails should not contain JS
-                    "style-src 'unsafe-inline'; "
-                    "img-src https: data:"
-                )
+                r._csp_ignore = True
                return r
        else:
            raise Http404(_('Unknown email renderer.'))
@@ -41,30 +41,6 @@ from pretix.control.forms.mailsetup import SimpleMailForm, SMTPMailForm
 logger = logging.getLogger(__name__)


-def get_cname_record(hostname):
-    try:
-        r = dns.resolver.Resolver()
-        answers = r.resolve(hostname, 'CNAME')
-        answers = list(answers)
-        if len(answers) != 1:
-            logger.exception('Found multiple CNAME records for {}'.format(hostname))
-            return
-        return str(answers[0].target).lower()
-    except:
-        logger.exception('Could not fetch CNAME record for {}'.format(hostname))
-
-
-def get_dmarc_record(hostname):
-    try:
-        r = dns.resolver.Resolver()
-        for resp in r.resolve("_dmarc." + hostname, 'TXT'):
-            data = b''.join(resp.strings).decode()
-            if 'DMARC1' in data.strip():
-                return data
-    except:
-        logger.exception("Could not fetch DMARC record for {}".format(hostname))
-
-
 def get_spf_record(hostname):
    try:
        r = dns.resolver.Resolver()
@@ -73,7 +49,7 @@ def get_spf_record(hostname):
            if data.lower().strip().startswith('v=spf1 '):  # RFC7208, section 4.5
                return data
    except:
-        logger.exception("Could not fetch SPF record for {}".format(hostname))
+        logger.exception("Could not fetch SPF record")


 def _check_spf_record(not_found_lookup_parts, spf_record, depth):
@@ -192,15 +168,10 @@ class MailSettingsSetupView(TemplateView):
                return super().get(request, *args, **kwargs)

            session_key = f'sender_mail_verification_code_{self.request.path}_{self.simple_form.cleaned_data.get("mail_from")}'
-            verify_dns = (
-                settings.MAIL_CUSTOM_SENDER_SPF_STRING or
-                (settings.MAIL_CUSTOM_SENDER_DKIM_CNAME and settings.MAIL_CUSTOM_SENDER_DKIM_SELECTOR) or
-                settings.MAIL_CUSTOM_SENDER_DMARC_REQUIRED
-            )
            allow_save = (
                (not settings.MAIL_CUSTOM_SENDER_VERIFICATION_REQUIRED or
                 ('verification' in self.request.POST and self.request.POST.get('verification', '') == self.request.session.get(session_key, None))) and
-                (not verify_dns or self.request.POST.get('state') == 'save')
+                (not settings.MAIL_CUSTOM_SENDER_SPF_STRING or self.request.POST.get('state') == 'save')
            )

            if allow_save:
@@ -221,8 +192,8 @@ class MailSettingsSetupView(TemplateView):

            spf_warning = None
            spf_record = None
-            hostname = self.simple_form.cleaned_data['mail_from'].split('@')[-1]
            if settings.MAIL_CUSTOM_SENDER_SPF_STRING:
+                hostname = self.simple_form.cleaned_data['mail_from'].split('@')[-1]
                spf_record = get_spf_record(hostname)
                if not spf_record:
                    spf_warning = _(
@@ -239,43 +210,7 @@ class MailSettingsSetupView(TemplateView):
                        'this system in the SPF record.'
                    )

-            dkim_warning = None
-            dkim_hostname = None
-            dkim_cname = None
-            if settings.MAIL_CUSTOM_SENDER_DKIM_CNAME and settings.MAIL_CUSTOM_SENDER_DKIM_SELECTOR:
-                dkim_hostname = settings.MAIL_CUSTOM_SENDER_DKIM_SELECTOR + '._domainkey.' + hostname
-                cname_target = get_cname_record(dkim_hostname)
-                dkim_cname = settings.MAIL_CUSTOM_SENDER_DKIM_CNAME
-                if not dkim_cname.endswith("."):
-                    dkim_cname += "."
-                if "%s" in dkim_cname:
-                    dkim_cname = dkim_cname.replace("%s", hostname.replace(".", "-").lower())
-                if not cname_target:
-                    dkim_warning = _(
-                        'We could not find a CNAME record pointing to our DKIM key for domain you are trying to use. '
-                        'This means that there is a very high change most of the emails will be rejected or marked as '
-                        'spam. We strongly recommend setting up DKIM through a CNAME record. You can do so through the '
-                        'DNS settings at the provider you registered your domain with.'
-                    )
-                elif cname_target != dkim_cname:
-                    dkim_warning = _(
-                        'We found a CNAME record for a DKIM key, but it is not pointing to the right location. '
-                        'This means that there is a very high chance most of the emails will be rejected or marked as '
-                        'spam. You should update the DNS settings of your domain.'
-                    )
-
-            dmarc_warning = None
-            dmarc_record = None
-            if settings.MAIL_CUSTOM_SENDER_DMARC_REQUIRED:
-                dmarc_record = get_dmarc_record(hostname)
-                if not dmarc_record:
-                    spf_warning = _(
-                        'We did not find DMARC record for your domain. This means that there is a very high chance '
-                        'most of the emails will be rejected or marked as spam. You should update the DNS settings '
-                        'of your domain.'
-                    )
-
-            verification = settings.MAIL_CUSTOM_SENDER_VERIFICATION_REQUIRED and not spf_warning and not dkim_warning and not dmarc_warning
+            verification = settings.MAIL_CUSTOM_SENDER_VERIFICATION_REQUIRED and not spf_warning
            if verification:
                if 'verification' in self.request.POST:
                    messages.error(request, _('The verification code was incorrect, please try again.'))
@@ -306,12 +241,6 @@ class MailSettingsSetupView(TemplateView):
                    'spf_warning': spf_warning,
                    'spf_record': spf_record,
                    'spf_key': settings.MAIL_CUSTOM_SENDER_SPF_STRING,
-                    'dkim_warning': dkim_warning,
-                    'dkim_hostname': dkim_hostname,
-                    'dkim_cname': dkim_cname,
-                    'dmarc_warning': dmarc_warning,
-                    'dmarc_record': dmarc_record,
-                    'hostname': hostname,
                    'recp': self.simple_form.cleaned_data.get('mail_from')
                },
                using=self.template_engine,
@@ -551,10 +551,10 @@ class OrderDetail(OrderView):
        ctx['refunds'] = self.order.refunds.select_related('payment').order_by('-created')
        for p in ctx['payments']:
            if p.payment_provider:
-                p.html_info = (p.payment_provider.payment_control_render(self.request, p) or "").strip()
+                p.html_info = p.payment_provider.payment_control_render(self.request, p) or ""
        for r in ctx['refunds']:
            if r.payment_provider:
-                r.html_info = (r.payment_provider.refund_control_render(self.request, r) or "").strip()
+                r.html_info = r.payment_provider.refund_control_render(self.request, r) or ""
        ctx['invoices'] = list(self.order.invoices.all().select_related('event'))
        ctx['comment_form'] = CommentForm(initial={
            'comment': self.order.comment,
@@ -70,6 +70,7 @@ class BaseEditorView(EventPermissionRequiredMixin, TemplateView):
        if 'placeholders' in request.GET:
            return self.get_placeholders_help(request)
        resp = super().get(request, *args, **kwargs)
+        resp._csp_ignore = True
        return resp

    def get_placeholders_help(self, request):
@@ -19,9 +19,7 @@
 # You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
 # <https://www.gnu.org/licenses/>.
 #
-import itertools
 import re
-from http.cookies import Morsel

 from django.conf import settings

@@ -50,41 +48,6 @@ def set_cookie_without_samesite(request, response, key, *args, **kwargs):
        response.cookies[key]['Partitioned'] = True


-def thoroughly_delete_cookie(response, cookie_name, **kwargs):
-    """ Deletes different possible versions of a cookie (SameSite, Partitioned) """
-    properties = {"SameSite": ["", 'None'], "Partitioned": ["", True]}
-    for i, values in enumerate(itertools.product(*properties.values())):
-        m = Morsel()
-        m.set(cookie_name, '', '')
-        m.update(kwargs)
-        m.update(zip(properties.keys(), values))
-        m['expires'] = "Thu, 01 Jan 1970 00:00:00 GMT"
-
-        response.cookies[f'___DELETECOOKIE__{i}___{cookie_name}'] = m
-
-    # Make sure settings a cookie afterwards will add a new item in the dictionary, placing
-    # it below our deletion headers.
-    response.cookies.pop(cookie_name, None)
-
-
-def get_all_values_of_cookie(cookie_header, cookie_name):
-    # like django.http.cookie.parse_cookie, but returns all values of duplicated cookies instead of only the last
-    values = list()
-    if not cookie_header:
-        return values
-    for chunk in cookie_header.split(";"):
-        if "=" in chunk:
-            key, val = chunk.split("=", 1)
-        else:
-            # Assume an empty name per
-            # https://bugzilla.mozilla.org/show_bug.cgi?id=169091
-            key, val = "", chunk
-        key, val = key.strip(), val.strip()
-        if key == cookie_name:
-            values.append(val)
-    return values
-
-
 # Based on https://www.chromium.org/updates/same-site/incompatible-clients
 # Copyright 2019 Google LLC.
 # SPDX-License-Identifier: Apache-2.0
@@ -47,5 +47,5 @@ def escapejson(value):

@keep_lazy(str, SafeText)
 def escapejson_attr(value):
-    """Hex encodes characters for use in a html attributw script."""
+    """Hex encodes characters for use in a html attribute."""
    return mark_safe(force_str(value).translate(_json_escapes_attr))
@@ -20,11 +20,9 @@
 # <https://www.gnu.org/licenses/>.
 #
 import copy
-from decimal import Decimal

 from django.core.files import File
 from django.db import models
-from django.db.models.fields import DecimalField


 class Thumbnail(models.Model):
@@ -56,33 +54,3 @@ def flatten_choices(choices):
            yield from label_or_nested
        else:
            yield value_or_group, label_or_nested
-
-
-def _normalize_decimal(d: Decimal) -> Decimal:
-    """
-    Strips trailing zeros, e.g.
-
-    20.000 → 20
-    20.010 → 20.01
-    20.100 → 20.1
-
-    But unlike of Decimal.normalize(), 20.000 will not become 2e+1. Very small decimals might still be represented
-    in scientific notation when printed.
-    """
-    normalized = d.normalize()
-    sign, digit, exponent = normalized.as_tuple()
-    if exponent > 0:
-        return normalized.quantize(1)
-    return normalized
-
-
-class NormalizedDecimalField(DecimalField):
-    """
-    Variant of DecimalField that never outputs the trailing zeros, so we always have normalized decimals internally.
-    Use this only for fields where the trailing zeros are pointless (e.g. percentages), not for monetary amounts.
-    """
-
-    def from_db_value(self, value, expression, connection):
-        if value is not None:
-            value = _normalize_decimal(value)
-        return value
@@ -8,8 +8,8 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-06 15:52+0000\n"
-"PO-Revision-Date: 2026-07-13 11:28+0000\n"
-"Last-Translator: ahmed badr <ahmedbadr@oma.com.eg>\n"
+"PO-Revision-Date: 2021-09-15 11:22+0000\n"
+"Last-Translator: Mohamed Tawfiq <mtawfiq@wafyapp.com>\n"
 "Language-Team: Arabic <https://translate.pretix.eu/projects/pretix/pretix-js/"
 "ar/>\n"
 "Language: ar\n"
@@ -18,7 +18,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=6; plural=n==0 ? 0 : n==1 ? 1 : n==2 ? 2 : n%100>=3 "
 "&& n%100<=10 ? 3 : n%100>=11 ? 4 : 5;\n"
-"X-Generator: Weblate 2026.7.1\n"
+"X-Generator: Weblate 4.8\n"

 #: pretix/plugins/banktransfer/static/pretixplugins/banktransfer/ui.js
 msgid "Marked as paid"
@@ -30,110 +30,112 @@ msgstr "تعليق:"

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "PayPal"
-msgstr "باي بال"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Venmo"
-msgstr "Venmo"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 #: pretix/static/pretixpresale/js/walletdetection.js
 msgid "Apple Pay"
-msgstr "Apple Pay"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Itaú"
-msgstr "إيتاو"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "PayPal Credit"
-msgstr "الائتمان من PayPal"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Credit Card"
-msgstr "بطاقة الائتمان"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "PayPal Pay Later"
-msgstr "الدفع لاحقًا عبر PayPal"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "iDEAL | Wero"
-msgstr "iDEAL | التحدي"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "SEPA Direct Debit"
-msgstr "الخصم المباشر في منطقة الدفع الموحدة (SEPA)"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Bancontact"
-msgstr "بانكونتاكت"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "giropay"
-msgstr "giropay"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "SOFORT"
-msgstr "فوراً"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
+#, fuzzy
+#| msgid "Yes"
 msgid "eps"
-msgstr "نقاط إضافية"
+msgstr "نعم"

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "MyBank"
-msgstr "بنكي"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Przelewy24"
-msgstr "Przelewy24"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Verkkopankki"
-msgstr "الخدمات المصرفية عبر الإنترنت"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "PayU"
-msgstr "الدفع لك"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "BLIK"
-msgstr "BLIK"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Trustly"
-msgstr "Trustly"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Zimpler"
-msgstr "Zimpler"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Maxima"
-msgstr "الأعظم"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "OXXO"
-msgstr "OXXO"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Boleto"
-msgstr "تذكرة"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "WeChat Pay"
-msgstr "WeChat Pay"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Mercado Pago"
-msgstr "Mercado Pago"
+msgstr ""

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 #: pretix/static/pretixpresale/js/ui/cart.js
 msgid "Continue"
-msgstr "تابع"
+msgstr "المتابعة"

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 #: pretix/plugins/stripe/static/pretixplugins/stripe/pretix-stripe.js
@@ -142,7 +144,7 @@ msgstr "جاري تأكيد الدفع الخاص بك …"

 #: pretix/plugins/paypal2/static/pretixplugins/paypal2/pretix-paypal.js
 msgid "Payment method unavailable"
-msgstr "طريقة الدفع غير متاحة"
+msgstr ""

 #: pretix/plugins/statistics/static/pretixplugins/statistics/statistics.js
 msgid "Placed orders"
@@ -154,11 +156,11 @@ msgstr "الطلبات المدفوعة"

 #: pretix/plugins/statistics/static/pretixplugins/statistics/statistics.js
 msgid "Attendees (ordered)"
-msgstr "الحاضرون (حسب الترتيب)"
+msgstr ""

 #: pretix/plugins/statistics/static/pretixplugins/statistics/statistics.js
 msgid "Attendees (paid)"
-msgstr "الحاضرون (الذين دفعوا رسوم الاشتراك)"
+msgstr ""

 #: pretix/plugins/statistics/static/pretixplugins/statistics/statistics.js
 msgid "Total revenue"
@@ -190,7 +192,7 @@ msgstr "تبديل قائمة الدخول"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Search results"
-msgstr "نتائج البحث"
+msgstr "البحث في النتائج"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "No tickets found"
@@ -234,15 +236,15 @@ msgstr "غير مدفوع"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Canceled"
-msgstr "تم إلغاؤه"
+msgstr "ملغاة"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Confirmed"
-msgstr "تم التأكيد"
+msgstr ""

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Approval pending"
-msgstr "في انتظار الموافقة"
+msgstr ""

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Redeemed"
@@ -250,11 +252,11 @@ msgstr "مستخدم"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Cancel"
-msgstr "إلغاء"
+msgstr "قم بالإلغاء"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Ticket not paid"
-msgstr "التذكرة لم يتم دفع ثمنها"
+msgstr "لم يتم دفع قيمة التذكرة"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "This ticket is not yet paid. Do you want to continue anyways?"
@@ -274,19 +276,23 @@ msgstr "تم تسجيل الخروج"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Ticket already used"
-msgstr "تم استخدام التذكرة بالفعل"
+msgstr "تم استخدام التذكرة مسبقا"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Information required"
-msgstr "المعلومات المطلوبة"
+msgstr "معلومات مطلوبة"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
+#, fuzzy
+#| msgid "Unknown error."
 msgid "Unknown ticket"
-msgstr "تذكرة غير معروفة"
+msgstr "خطأ غير معروف."

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
+#, fuzzy
+#| msgid "Entry not allowed"
 msgid "Ticket type not allowed here"
-msgstr "نوع تذكرة الدخول غير مسموح به هنا"
+msgstr "إدخال غير مسموح"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Entry not allowed"
@@ -294,13 +300,17 @@ msgstr "إدخال غير مسموح"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Ticket code revoked/changed"
-msgstr "تم إلغاء/تغيير رمز التذكرة"
+msgstr "تم إلغاء رمز التذكرة أو تبديله"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
+#, fuzzy
+#| msgid "Ticket not paid"
 msgid "Ticket blocked"
-msgstr "التذكرة غير محجوبة"
+msgstr "لم يتم دفع قيمة التذكرة"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
+#, fuzzy
+#| msgid "Ticket not paid"
 msgid "Ticket not valid at this time"
 msgstr "لم يتم دفع قيمة التذكرة"

@@ -310,11 +320,11 @@ msgstr "تم إلغاء الطلب"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Ticket code is ambiguous on list"
-msgstr "رمز التذكرة غير واضح في القائمة"
+msgstr ""

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Order not approved"
-msgstr "لم تتم الموافقة على الطلب"
+msgstr ""

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Checked-in Tickets"
@@ -338,9 +348,12 @@ msgstr "نعم"
 #: pretix/static/pretixcontrol/js/ui/question.js
 #: pretix/static/pretixpresale/js/ui/questions.js
 msgid "No"
-msgstr "من"
+msgstr "لا"

 #: pretix/static/lightbox/js/lightbox.js
+#, fuzzy
+#| msgctxt "widget"
+#| msgid "Close"
 msgid "close"
 msgstr "إغلاق"

@@ -395,7 +408,7 @@ msgstr ""

 #: pretix/static/pretixbase/js/asynctask.js
 msgid "We are processing your request …"
-msgstr "نحن نقوم بمعالجة طلبك …"
+msgstr "جاري معالجة طلبك …"

 #: pretix/static/pretixbase/js/asynctask.js
 msgid ""
@@ -408,7 +421,7 @@ msgstr ""

 #: pretix/static/pretixbase/js/asynctask.js
 msgid "If this takes longer than a few minutes, please contact us."
-msgstr "إذا استغرق ذلك أكثر من بضع دقائق، يرجى الاتصال بنا."
+msgstr ""

 #: pretix/static/pretixbase/js/asynctask.js
 msgid "Close message"
@@ -424,11 +437,11 @@ msgstr "للنسخ اضغط Ctrl + C!"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/App.vue
 msgid "Edit"
-msgstr "تحرير"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/App.vue
 msgid "Visualize"
-msgstr "تصور"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/App.vue
 msgid ""
@@ -436,13 +449,10 @@ msgid ""
 "or variations are not contained in any of your rule parts so people with "
 "these tickets will not get in:"
 msgstr ""
-"تقوم القاعدة الخاصة بك دائمًا بالتصفية حسب المنتج أو النوع، لكن المنتجات أو "
-"الأنواع التالية غير مدرجة في أي من أجزاء القاعدة الخاصة بك، لذا لن يتم قبول "
-"الأشخاص الذين يحملون هذه التذاكر:"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/App.vue
 msgid "Please double-check if this was intentional."
-msgstr "يرجى التأكد مرة أخرى مما إذا كان ذلك مقصودًا أم لا."
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "All of the conditions below (AND)"
@@ -482,21 +492,21 @@ msgstr "أضف شرطا"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "minutes"
-msgstr "دقائق"
+msgstr "الدقائق"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Duplicate"
-msgstr "مكرر"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgctxt "entry_status"
 msgid "present"
-msgstr "حاضر"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgctxt "entry_status"
 msgid "absent"
-msgstr "غائب"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "is one of"
@@ -512,11 +522,11 @@ msgstr "بعد"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "="
-msgstr "="
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Product"
-msgstr "المنتج"
+msgstr "منتج"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Product variation"
@@ -524,7 +534,7 @@ msgstr "نوع المنتج"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Gate"
-msgstr "الشارع"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Current date and time"
@@ -532,11 +542,11 @@ msgstr "التاريخ والوقت الحالي"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Current day of the week (1 = Monday, 7 = Sunday)"
-msgstr "اليوم الحالي من الأسبوع (1 = الاثنين، 7 = الأحد)"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Current entry status"
-msgstr "الحالة الحالية للطلب"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Number of previous entries"
@@ -547,40 +557,48 @@ msgid "Number of previous entries since midnight"
 msgstr "عدد المدخلات السابقة قبل منتصف الليل"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
+#, fuzzy
+#| msgid "Number of previous entries"
 msgid "Number of previous entries since"
-msgstr "عدد الإدخالات السابقة منذ"
+msgstr "عدد المدخلات السابقة"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
+#, fuzzy
+#| msgid "Number of previous entries"
 msgid "Number of previous entries before"
-msgstr "عدد الإدخالات السابقة قبل"
+msgstr "عدد المدخلات السابقة"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Number of days with a previous entry"
 msgstr "عدد الأيام التي تحتوي على مدخل سابق"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
+#, fuzzy
+#| msgid "Number of days with a previous entry"
 msgid "Number of days with a previous entry since"
-msgstr "عدد الأيام التي تحتوي على قيد سابق منذ"
+msgstr "عدد الأيام التي تحتوي على مدخل سابق"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
+#, fuzzy
+#| msgid "Number of days with a previous entry"
 msgid "Number of days with a previous entry before"
-msgstr "عدد الأيام التي يوجد فيها قيد سابق قبل ذلك"
+msgstr "عدد الأيام التي تحتوي على مدخل سابق"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Minutes since last entry (-1 on first entry)"
-msgstr "عدد الدقائق منذ آخر تسجيل (-1 عند التسجيل الأول)"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "Minutes since first entry (-1 on first entry)"
-msgstr "عدد الدقائق منذ أول دخول (-1 عند أول دخول)"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/django-interop.ts
 msgid "Error: Product not found!"
-msgstr "خطأ: لم يتم العثور على المنتج!"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/django-interop.ts
 msgid "Error: Variation not found!"
-msgstr "خطأ: لم يتم العثور على النسخة!"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/editor.js
 msgid "Check-in QR"
@@ -595,12 +613,16 @@ msgid "Group of objects"
 msgstr "مجموعة من العناصر"

 #: pretix/static/pretixcontrol/js/ui/editor.js
+#, fuzzy
+#| msgid "Text object"
 msgid "Text object (deprecated)"
-msgstr "كائن نصي (مهمل)"
+msgstr "عنصر نص"

 #: pretix/static/pretixcontrol/js/ui/editor.js
+#, fuzzy
+#| msgid "Text object"
 msgid "Text box"
-msgstr "مربع نصي"
+msgstr "عنصر نص"

 #: pretix/static/pretixcontrol/js/ui/editor.js
 msgid "Barcode area"
@@ -647,28 +669,28 @@ msgid "Unknown error."
 msgstr "خطأ غير معروف."

 #: pretix/static/pretixcontrol/js/ui/main.js
+#, fuzzy
+#| msgid "Your color has great contrast and is very easy to read!"
 msgid "Your color has great contrast and will provide excellent accessibility."
-msgstr "يتميز لونك بتباين رائع ويسهل قراءته للغاية! وسيوفر إمكانية وصول ممتازة."
+msgstr "اللون يتمتع بتباين كبير وتسهل قراءته!"

 #: pretix/static/pretixcontrol/js/ui/main.js
+#, fuzzy
+#| msgid "Your color has decent contrast and is probably good-enough to read!"
 msgid ""
 "Your color has decent contrast and is sufficient for minimum accessibility "
 "requirements."
-msgstr ""
-"يتميز لونك بتباين جيد، ومن المرجح أنه مناسب للقراءة! وهو كافٍ لتلبية الحد "
-"الأدنى من متطلبات سهولة الوصول."
+msgstr "اللون يحظى بتباين معقول ويمكن أن يكون مناسب للقراءة!"

 #: pretix/static/pretixcontrol/js/ui/main.js
 msgid ""
 "Your color has insufficient contrast to white. Accessibility of your site "
 "will be impacted."
 msgstr ""
-"اللون الذي اخترته لا يتمتع بتباين كافٍ مع اللون الأبيض. وسيؤثر ذلك على إمكانية "
-"الوصول إلى موقعك."

 #: pretix/static/pretixcontrol/js/ui/main.js
 msgid "Search query"
-msgstr "استعلام البحث"
+msgstr "البحث في الاستفسارات"

 #: pretix/static/pretixcontrol/js/ui/main.js
 msgid "All"
@@ -684,11 +706,11 @@ msgstr "المختارة فقط"

 #: pretix/static/pretixcontrol/js/ui/main.js
 msgid "Enter page number between 1 and %(max)s."
-msgstr "أدخل رقم الصفحة بين 1 و %(max)s."
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/main.js
 msgid "Invalid page number."
-msgstr "رقم الصفحة غير صحيح."
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/main.js
 msgid "Use a different name internally"
@@ -707,8 +729,10 @@ msgid "Calculating default price…"
 msgstr "حساب السعر الافتراضي…"

 #: pretix/static/pretixcontrol/js/ui/plugins.js
+#, fuzzy
+#| msgid "Search results"
 msgid "No results"
-msgstr "البحث: لا توجد نتائج"
+msgstr "البحث في النتائج"

 #: pretix/static/pretixcontrol/js/ui/question.js
 msgid "Others"
@@ -716,7 +740,7 @@ msgstr "غير ذلك"

 #: pretix/static/pretixcontrol/js/ui/question.js
 msgid "Count"
-msgstr "العدد"
+msgstr "احسب"

 #: pretix/static/pretixcontrol/js/ui/subevent.js
 msgid "(one more date)"
@@ -729,12 +753,12 @@ msgstr[4] "أيام عديدة"
 msgstr[5] "أخرى"

 #: pretix/static/pretixpresale/js/ui/cart.js
+#, fuzzy
+#| msgid "The items in your cart are no longer reserved for you."
 msgid ""
 "The items in your cart are no longer reserved for you. You can still "
 "complete your order as long as they’re available."
-msgstr ""
-"لم تعد المنتجات الموجودة في سلة التسوق محجوزة لك. لا يزال بإمكانك إتمام طلبك "
-"طالما كانت هذه المنتجات متوفرة."
+msgstr "لم تعد العناصر الموجودة في عربة التسوق الخاصة بك محجوزة لك."

 #: pretix/static/pretixpresale/js/ui/cart.js
 msgid "Cart expired"
@@ -742,9 +766,13 @@ msgstr "انتهت صلاحية عربة التسوق"

 #: pretix/static/pretixpresale/js/ui/cart.js
 msgid "Your cart is about to expire."
-msgstr "سوف تنتهي صلاحية سلة التسوق الخاصة بك قريبًا."
+msgstr ""

 #: pretix/static/pretixpresale/js/ui/cart.js
+#, fuzzy
+#| msgid "The items in your cart are reserved for you for one minute."
+#| msgid_plural ""
+#| "The items in your cart are reserved for you for {num} minutes."
 msgid "The items in your cart are reserved for you for one minute."
 msgid_plural "The items in your cart are reserved for you for {num} minutes."
 msgstr[0] "سيتم حجز العناصر لك في سلة التسوق لمدة {num}."
@@ -755,24 +783,26 @@ msgstr[4] "سيتم حجز العناصر لك في سلة التسوق لدقا
 msgstr[5] "سيتم حجز العناصر لك في سلة التسوق لمدة {num}."

 #: pretix/static/pretixpresale/js/ui/cart.js
+#, fuzzy
+#| msgid "Cart expired"
 msgid "Your cart has expired."
 msgstr "انتهت صلاحية عربة التسوق"

 #: pretix/static/pretixpresale/js/ui/cart.js
+#, fuzzy
+#| msgid "The items in your cart are no longer reserved for you."
 msgid ""
 "The items in your cart are no longer reserved for you. You can still "
 "complete your order as long as they're available."
-msgstr ""
-"لم تعد المنتجات الموجودة في سلة التسوق محجوزة لك. لا يزال بإمكانك إتمام طلبك "
-"طالما كانت هذه المنتجات متوفرة."
+msgstr "لم تعد العناصر الموجودة في عربة التسوق الخاصة بك محجوزة لك."

 #: pretix/static/pretixpresale/js/ui/cart.js
 msgid "Do you want to renew the reservation period?"
-msgstr "هل ترغب في تمديد فترة الحجز؟"
+msgstr ""

 #: pretix/static/pretixpresale/js/ui/cart.js
 msgid "Renew reservation"
-msgstr "تجديد الحجز"
+msgstr ""

 #: pretix/static/pretixpresale/js/ui/main.js
 msgid "The organizer keeps %(currency)s %(amount)s"
@@ -792,77 +822,82 @@ msgstr "التوقيت المحلي:"

 #: pretix/static/pretixpresale/js/walletdetection.js
 msgid "Google Pay"
-msgstr "Google Pay"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgctxt "widget"
 msgid "Quantity"
-msgstr "الكمية"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgctxt "widget"
 msgid "Decrease quantity"
-msgstr "تقليل الكمية"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgctxt "widget"
 msgid "Increase quantity"
-msgstr "زيادة الكمية"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgctxt "widget"
 msgid "Filter events by"
-msgstr "تصفية الأحداث حسب"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgctxt "widget"
 msgid "Filter"
-msgstr "فلتر"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgctxt "widget"
 msgid "Price"
-msgstr "السعر"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 #, javascript-format
 msgctxt "widget"
 msgid "Original price: %s"
-msgstr "السعر الأصلي: %s"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 #, javascript-format
 msgctxt "widget"
 msgid "New price: %s"
-msgstr "السعر الجديد: %s"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgid "Selected only"
 msgctxt "widget"
 msgid "Select"
 msgstr "المختارة فقط"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
-#, javascript-format
+#, fuzzy, javascript-format
+#| msgid "Selected only"
 msgctxt "widget"
 msgid "Select %s"
-msgstr "تم اختيار %s فقط"
+msgstr "المختارة فقط"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
-#, javascript-format
+#, fuzzy, javascript-format
+#| msgctxt "widget"
+#| msgid "See variations"
 msgctxt "widget"
 msgid "Select variant %s"
-msgstr "اختر النوع %s"
+msgstr "أنظر إلى الاختلافات"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -905,7 +940,7 @@ msgstr "من %(currency) s %(price)s"
 #, javascript-format
 msgctxt "widget"
 msgid "Image of %s"
-msgstr "صورة لـ %s"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -946,21 +981,27 @@ msgstr "متوفرة مع القسيمة فقط"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgctxt "widget"
+#| msgid "currently available: %s"
 msgctxt "widget"
 msgid "Not yet available"
-msgstr "حاليًا غير متوفر: %s"
+msgstr "متوفر حاليا: %s"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgctxt "widget"
 msgid "Not available anymore"
-msgstr "لم يعد متوفراً"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgctxt "widget"
+#| msgid "currently available: %s"
 msgctxt "widget"
 msgid "Currently not available"
-msgstr "غير متوفر حاليًا: %s"
+msgstr "متوفر حاليا: %s"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -988,20 +1029,24 @@ msgid ""
 "There are currently a lot of users in this ticket shop. Please open the shop "
 "in a new tab to continue."
 msgstr ""
-"يوجد حالياً عدد كبير من المستخدمين في متجر التذاكر هذا. يرجى فتح المتجر في "
-"علامة تبويب جديدة للمتابعة."

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgctxt "widget"
+#| msgid "Close ticket shop"
 msgctxt "widget"
 msgid "Open ticket shop"
-msgstr "إغلاق/فتح متجر التذاكر"
+msgstr "إغلاق متجر التذاكر"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgctxt "widget"
+#| msgid "Resume checkout"
 msgctxt "widget"
 msgid "Checkout"
-msgstr "استئناف عملية الدفع"
+msgstr "استئناف الدفع"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -1016,9 +1061,6 @@ msgid ""
 "We could not create your cart, since there are currently too many users in "
 "this ticket shop. Please click \"Continue\" to retry in a new tab."
 msgstr ""
-"لم نتمكن من إنشاء سلة التسوق الخاصة بك، نظرًا لوجود عدد كبير جدًّا من "
-"المستخدمين حاليًّا في متجر التذاكر هذا. يرجى النقر على «متابعة» لإعادة المحاولة "
-"في علامة تبويب جديدة."

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -1068,15 +1110,18 @@ msgstr "إغلاق"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgctxt "widget"
+#| msgid "Resume checkout"
 msgctxt "widget"
 msgid "Close checkout"
-msgstr "إغلاق عملية الدفع"
+msgstr "استئناف الدفع"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgctxt "widget"
 msgid "You cannot cancel this operation. Please wait for loading to finish."
-msgstr "لا يمكنك إلغاء هذه العملية. يرجى الانتظار حتى ينتهي التحميل."
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -1086,15 +1131,21 @@ msgstr "استمرار"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgctxt "widget"
+#| msgid "See variations"
 msgctxt "widget"
 msgid "Show variants"
-msgstr "انظر الاختلافات"
+msgstr "أنظر إلى الاختلافات"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgctxt "widget"
+#| msgid "See variations"
 msgctxt "widget"
 msgid "Hide variants"
-msgstr "إخفاء الاختلافات"
+msgstr "أنظر إلى الاختلافات"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -1152,11 +1203,11 @@ msgid ""
 "add yourself to the waiting list. We will then notify if seats are available "
 "again."
 msgstr ""
-"تم بيع جميع فئات التذاكر أو بعضها حاليًا. إذا أردت، يمكنك إضافة اسمك إلى "
-"قائمة الانتظار. وسنقوم بإخطارك إذا توفرت مقاعد مرة أخرى."

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
+#, fuzzy
+#| msgid "Load more"
 msgctxt "widget"
 msgid "Load more"
 msgstr "تحميل المزيد"
@@ -1199,37 +1250,37 @@ msgstr "الأحد"
 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgid "Monday"
-msgstr "الاثنين"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgid "Tuesday"
-msgstr "الثلاثاء"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgid "Wednesday"
-msgstr "الأربعاء"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgid "Thursday"
-msgstr "الخميس"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgid "Friday"
-msgstr "الجمعة"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgid "Saturday"
-msgstr "السبت"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgid "Sunday"
-msgstr "الأحد"
+msgstr ""

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -1254,7 +1305,7 @@ msgstr "أبريل"
 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
 msgid "May"
-msgstr "هناك"
+msgstr "مايو"

 #: pretix/static/pretixpresale/js/widget/widget.js
 #: pretix/static/pretixpresale/widget/src/i18n.ts
@@ -5,8 +5,8 @@ msgstr ""
 "Project-Id-Version: 1\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-07 09:30+0000\n"
-"PO-Revision-Date: 2026-07-15 14:20+0000\n"
-"Last-Translator: Jochen Siebert <siebert@rami.io>\n"
+"PO-Revision-Date: 2026-07-07 09:55+0000\n"
+"Last-Translator: Raphael Michel <michel@rami.io>\n"
 "Language-Team: German <https://translate.pretix.eu/projects/pretix/pretix/"
 "de/>\n"
 "Language: de\n"
@@ -14,7 +14,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 2026.7.1\n"
+"X-Generator: Weblate 2026.6.1\n"
 "X-Poedit-Bookmarks: -1,-1,904,-1,-1,-1,-1,-1,-1,-1\n"

 #: htmlcov/d_daa1541d0cbf5e2b_dashboards_py.html
@@ -8166,7 +8166,7 @@ msgstr "Zugang zu existierenden Veranstaltungen"
 msgctxt "permission_level"
 msgid "Access existing and create new events"
 msgstr ""
-"Zugang zu existierenden Veranstaltungen und neue Veranstaltungen erstellen"
+"Zugang zu existieren Veranstaltungen und neue Veranstaltungen erstellen"

 #: pretix/base/permissions.py
 msgid ""
@@ -8,8 +8,8 @@ msgstr ""
 "Project-Id-Version: \n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-06 15:52+0000\n"
-"PO-Revision-Date: 2026-07-13 11:28+0000\n"
-"Last-Translator: Raphael Michel <michel@rami.io>\n"
+"PO-Revision-Date: 2026-05-04 07:42+0000\n"
+"Last-Translator: Martin Gross <gross@rami.io>\n"
 "Language-Team: German (informal) <https://translate.pretix.eu/projects/"
 "pretix/pretix-js/de_Informal/>\n"
 "Language: de_Informal\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 2026.7.1\n"
+"X-Generator: Weblate 5.17\n"

 #: pretix/plugins/banktransfer/static/pretixplugins/banktransfer/ui.js
 msgid "Marked as paid"
@@ -430,11 +430,11 @@ msgstr "Drücke Strg+C zum kopieren!"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/App.vue
 msgid "Edit"
-msgstr "Bearbeiten"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/App.vue
 msgid "Visualize"
-msgstr "Visualisieren"
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/App.vue
 msgid ""
@@ -442,13 +442,10 @@ msgid ""
 "or variations are not contained in any of your rule parts so people with "
 "these tickets will not get in:"
 msgstr ""
-"Deine Regeln filtern immer nach Produkt oder Variation, jedoch sind die "
-"folgenden Produkte oder Variationen nicht in einer Ihrer Regeln enthalten, "
-"sodass Kunden mit diesen Tickets keinen Eintritt erhalten werden:"

 #: pretix/static/pretixcontrol/js/ui/checkinrules/App.vue
 msgid "Please double-check if this was intentional."
-msgstr "Bitte überprüfe, ob dies beabsichtigt war."
+msgstr ""

 #: pretix/static/pretixcontrol/js/ui/checkinrules/constants.ts
 msgid "All of the conditions below (AND)"
@@ -8,7 +8,7 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-07 09:30+0000\n"
-"PO-Revision-Date: 2026-07-08 16:00+0000\n"
+"PO-Revision-Date: 2026-07-07 09:22+0000\n"
 "Last-Translator: CVZ-es <damien.bremont@casadevelazquez.org>\n"
 "Language-Team: Spanish <https://translate.pretix.eu/projects/pretix/pretix/"
 "es/>\n"
@@ -11453,8 +11453,10 @@ msgstr ""
 "contacto con usted."

 #: pretix/base/settings.py pretix/control/forms/event.py
+#, fuzzy
+#| msgid "Contact"
 msgid "Contact URL"
-msgstr "URL de contacto"
+msgstr "Contacto"

 #: pretix/base/settings.py pretix/control/forms/event.py
 msgid ""
@@ -11462,10 +11464,6 @@ msgid ""
 "the email address above. Please note that you still need to add a contact "
 "email address that will be shared with all emails you send."
 msgstr ""
-"Si activas esta opción, el enlace de contacto del pie de página redirigirá "
-"aquí, en lugar de utilizar la dirección de correo electrónico indicada más "
-"arriba. Ten en cuenta que aún así tendrás que añadir una dirección de correo "
-"electrónico de contacto que se incluirá en todos los correos que envíes."

 #: pretix/base/settings.py pretix/control/forms/event.py
 msgid "Imprint URL"
@@ -19948,7 +19946,25 @@ msgstr ""
 "El equipo de %(instance)s\n"

 #: pretix/control/templates/pretixcontrol/email/email_setup.txt
-#, python-format
+#, fuzzy, python-format
+#| msgid ""
+#| "Hello,\n"
+#| "\n"
+#| "Someone requested to use %(address)s as a sender address on %(instance)s. "
+#| "Once verified, emails sent from %(instance)s can show this address as the "
+#| "sender.\n"
+#| "\n"
+#| "If this was you, enter the following code in the setup form:\n"
+#| "\n"
+#| "    %(code)s\n"
+#| "\n"
+#| "Don't share this code with anyone. The %(instance)s team will never ask "
+#| "you for it.\n"
+#| "\n"
+#| "If you didn't request this, you can safely ignore this email.\n"
+#| "\n"
+#| "Thanks,  \n"
+#| "The %(instance)s Team\n"
 msgid ""
 "Hello,\n"
 "\n"
@@ -19971,19 +19987,19 @@ msgid ""
 msgstr ""
 "Hola,\n"
 "\n"
-"Alguien ha solicitado utilizar %(address)s como dirección de remitente en %"
-"(instance)s. Una vez verificado, los correos electrónicos enviados desde %"
-"(instance)s podrán mostrar esta dirección como remitente.\n"
+"Alguien ha solicitado utilizar %(address)s como dirección de remitente en "
+"%(instance)s. Una vez verificado, los correos electrónicos enviados desde "
+"%(instance)s podrán mostrar esta dirección como remitente.\n"
 "\n"
-"Si ha sido usted quien lo ha solicitado, introduzca el siguiente código en "
-"el formulario de configuración:\n"
+"Si has sido tú, introduce el siguiente código en el formulario de "
+"configuración:\n"
 "\n"
 "    %(code)s\n"
 "\n"
-"No comparta este código con nadie a menos que quiera autorizarle a utilizar "
-"esta dirección para este fin. El equipo de %(instance)s nunca se lo pedirá.\n"
+"No compartas este código con nadie. El equipo de %(instance)s nunca te lo "
+"pedirá.\n"
 "\n"
-"Si no ha solicitado esto, puede ignorar este correo electrónico sin ningún "
+"Si no has solicitado esto, puedes ignorar este correo electrónico sin ningún "
 "problema.\n"
 "\n"
 "Gracias,  \n"
@@ -4,10 +4,10 @@ msgstr ""
 "Project-Id-Version: 1\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-07 09:30+0000\n"
-"PO-Revision-Date: 2026-07-08 16:00+0000\n"
+"PO-Revision-Date: 2026-07-07 09:22+0000\n"
 "Last-Translator: CVZ-es <damien.bremont@casadevelazquez.org>\n"
-"Language-Team: French <https://translate.pretix.eu/projects/pretix/pretix/"
-"fr/>\n"
+"Language-Team: French <https://translate.pretix.eu/projects/pretix/pretix/fr/"
+">\n"
 "Language: fr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -1933,7 +1933,7 @@ msgid ""
 "redeemed."
 msgstr ""
 "Ce produit ne sera affiché que si un bon de réduction correspondant au "
-"produit est validé."
+"produit est échangé."

 #: pretix/base/exporters/items.py pretix/base/models/items.py
 msgid "Buying this product requires approval"
@@ -4109,8 +4109,8 @@ msgstr ""
 msgid ""
 "To verify your email address {email} on {instance}, use the following code:"
 msgstr ""
-"Pour valider votre adresse e-mail {email} sur {instance}, utilisez le code "
-"suivant :"
+"Pour valider votre adresse e-mail {email} sur\n"
+"{instance}, utilisez le code suivant :"

 #: pretix/base/models/auth.py
 msgid "Your confirmation code"
@@ -6975,7 +6975,7 @@ msgstr "Nombre de fois que ce bon peut être utilisé."

 #: pretix/base/models/vouchers.py pretix/control/views/vouchers.py
 msgid "Redeemed"
-msgstr "Validé"
+msgstr "Échangé"

 #: pretix/base/models/vouchers.py
 msgid ""
@@ -11542,8 +11542,10 @@ msgstr ""
 "contacter."

 #: pretix/base/settings.py pretix/control/forms/event.py
+#, fuzzy
+#| msgid "Contact"
 msgid "Contact URL"
-msgstr "URL de contact"
+msgstr "Contact"

 #: pretix/base/settings.py pretix/control/forms/event.py
 msgid ""
@@ -11551,10 +11553,6 @@ msgid ""
 "the email address above. Please note that you still need to add a contact "
 "email address that will be shared with all emails you send."
 msgstr ""
-"Si vous activez cette option, le lien de contact figurant dans le pied de "
-"page redirigera vers cette page au lieu d'utiliser l'adresse e-mail indiquée "
-"ci-dessus. Veuillez noter que vous devrez tout de même ajouter une adresse e-"
-"mail de contact qui sera mentionnée dans tous les e-mails que vous enverrez."

 #: pretix/base/settings.py pretix/control/forms/event.py
 msgid "Imprint URL"
@@ -20096,7 +20094,25 @@ msgstr ""
 "L'équipe %(instance)s\n"

 #: pretix/control/templates/pretixcontrol/email/email_setup.txt
-#, python-format
+#, fuzzy, python-format
+#| msgid ""
+#| "Hello,\n"
+#| "\n"
+#| "Someone requested to use %(address)s as a sender address on %(instance)s. "
+#| "Once verified, emails sent from %(instance)s can show this address as the "
+#| "sender.\n"
+#| "\n"
+#| "If this was you, enter the following code in the setup form:\n"
+#| "\n"
+#| "    %(code)s\n"
+#| "\n"
+#| "Don't share this code with anyone. The %(instance)s team will never ask "
+#| "you for it.\n"
+#| "\n"
+#| "If you didn't request this, you can safely ignore this email.\n"
+#| "\n"
+#| "Thanks,  \n"
+#| "The %(instance)s Team\n"
 msgid ""
 "Hello,\n"
 "\n"
@@ -20120,23 +20136,22 @@ msgstr ""
 "Bonjour,\n"
 "\n"
 "Une personne a demandé à utiliser %(address)s comme adresse d'expéditeur sur "
-"%(instance)s. Une fois cette demande validée, les e-mails envoyés depuis %"
-"(instance)s pourront afficher cette adresse comme expéditeur.\n"
+"%(instance)s. Une fois cette demande validée, les e-mails envoyés depuis "
+"%(instance)s pourront afficher cette adresse comme expéditeur.\n"
 "\n"
-"Si c'est bien vous qui en avez fait la demande, veuillez saisir le code "
-"suivant dans le formulaire de configuration :\n"
+"Si c'est vous qui avez fait cette demande, veuillez saisir le code suivant "
+"dans le formulaire de configuration :\n"
 "\n"
 "    %(code)s\n"
 "\n"
-"Ne communiquez ce code à personne, sauf si vous souhaitez autoriser cette "
-"personne à utiliser cette adresse à cette fin. L'équipe de %(instance)s ne "
-"vous le demandera jamais.\n"
+"Ne communiquez ce code à personne. L'équipe de %(instance)s ne vous le "
+"demandera jamais.\n"
 "\n"
-"Si vous n'en avez pas fait la demande, vous pouvez ignorer cet e-mail en "
+"Si vous n’en avez pas fait la demande, vous pouvez ignorer cet e-mail en "
 "toute sécurité.\n"
 "\n"
 "Merci,  \n"
-"L'équipe de %(instance)s\n"
+"L’équipe %(instance)s\n"

 #: pretix/control/templates/pretixcontrol/email/forgot.txt
 #, python-format
@@ -36815,19 +36830,17 @@ msgstr ""

 #: pretix/presale/templates/pretixpresale/organizers/customer_login_interrupted_message.html
 msgid "How to fix this:"
-msgstr "Comment résoudre ce problème :"
+msgstr ""

 #: pretix/presale/templates/pretixpresale/organizers/customer_login_interrupted_message.html
 msgid "Close this page."
-msgstr "Fermer cette page."
+msgstr ""

 #: pretix/presale/templates/pretixpresale/organizers/customer_login_interrupted_message.html
 msgid ""
 "Open this website again directly in your main browser (for example Safari or "
 "Chrome)."
 msgstr ""
-"Rouvrez ce site directement dans votre navigateur principal (par exemple "
-"Safari ou Chrome)."

 #: pretix/presale/templates/pretixpresale/organizers/customer_login_interrupted_message.html
 msgid ""
@@ -36835,9 +36848,6 @@ msgid ""
 "browser window, without refreshing the page, opening new tabs, or switching "
 "apps part-way through."
 msgstr ""
-"Recommencez la procédure de paiement ou de connexion et menez-la à son terme "
-"dans la même fenêtre de navigateur, sans actualiser la page, ouvrir de "
-"nouveaux onglets ni changer d'application en cours de route."

 #: pretix/presale/templates/pretixpresale/organizers/customer_login_interrupted_message.html
 msgid ""
@@ -36845,10 +36855,6 @@ msgid ""
 "before retrying can help. As a last step, try using a different browser or "
 "another device (for example, a desktop or laptop computer)."
 msgstr ""
-"Si le problème persiste, il peut être utile de fermer toutes les fenêtres du "
-"navigateur et d'effacer les cookies avant de réessayer. En dernier recours, "
-"essayez d'utiliser un autre navigateur ou un autre appareil (par exemple, un "
-"ordinateur de bureau ou un ordinateur portable)."

 #: pretix/presale/templates/pretixpresale/organizers/customer_membership.html
 msgid "Your membership"
@@ -7,8 +7,8 @@ msgstr ""
 "Project-Id-Version: French\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-06 15:52+0000\n"
-"PO-Revision-Date: 2026-07-08 16:00+0000\n"
-"Last-Translator: Joram Schwartzmann <schwartzmann@pretix.eu>\n"
+"PO-Revision-Date: 2026-06-29 17:00+0000\n"
+"Last-Translator: CVZ-es <damien.bremont@casadevelazquez.org>\n"
 "Language-Team: French <https://translate.pretix.eu/projects/pretix/pretix-js/"
 "fr/>\n"
 "Language: fr\n"
@@ -244,7 +244,7 @@ msgstr "En attente d'approbation"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Redeemed"
-msgstr "Validé"
+msgstr "Échangé"

 #: pretix/plugins/webcheckin/static/pretixplugins/webcheckin/i18n.ts
 msgid "Cancel"
@@ -8,7 +8,7 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-07 09:30+0000\n"
-"PO-Revision-Date: 2026-07-14 15:00+0000\n"
+"PO-Revision-Date: 2026-07-07 09:17+0000\n"
 "Last-Translator: Hijiri Umemoto <hijiri@umemoto.org>\n"
 "Language-Team: Japanese <https://translate.pretix.eu/projects/pretix/pretix/"
 "ja/>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
-"X-Generator: Weblate 2026.7.1\n"
+"X-Generator: Weblate 2026.6.1\n"

 #: htmlcov/d_daa1541d0cbf5e2b_dashboards_py.html
 #: pretix/control/templates/pretixcontrol/events/index.html
@@ -11076,8 +11076,10 @@ msgid "We'll show this publicly to allow attendees to contact you."
 msgstr "参加者があなたに連絡できるように、これを公に表示します。"

 #: pretix/base/settings.py pretix/control/forms/event.py
+#, fuzzy
+#| msgid "Contact"
 msgid "Contact URL"
-msgstr "連絡先URL"
+msgstr "連絡先"

 #: pretix/base/settings.py pretix/control/forms/event.py
 msgid ""
@@ -11085,9 +11087,6 @@ msgid ""
 "the email address above. Please note that you still need to add a contact "
 "email address that will be shared with all emails you send."
 msgstr ""
-"これを設定すると、フッターの連絡先リンクが上記のメールアドレスではなくこちら"
-"を指すことになります。追加が必要な連絡先メールアドレスは、送信するすべての電"
-"子メールで共有されるのでご注意ください。"

 #: pretix/base/settings.py pretix/control/forms/event.py
 msgid "Imprint URL"
@@ -19361,7 +19360,25 @@ msgstr ""
 "%(instance)sのチーム\n"

 #: pretix/control/templates/pretixcontrol/email/email_setup.txt
-#, python-format
+#, fuzzy, python-format
+#| msgid ""
+#| "Hello,\n"
+#| "\n"
+#| "Someone requested to use %(address)s as a sender address on %(instance)s. "
+#| "Once verified, emails sent from %(instance)s can show this address as the "
+#| "sender.\n"
+#| "\n"
+#| "If this was you, enter the following code in the setup form:\n"
+#| "\n"
+#| "    %(code)s\n"
+#| "\n"
+#| "Don't share this code with anyone. The %(instance)s team will never ask "
+#| "you for it.\n"
+#| "\n"
+#| "If you didn't request this, you can safely ignore this email.\n"
+#| "\n"
+#| "Thanks,  \n"
+#| "The %(instance)s Team\n"
 msgid ""
 "Hello,\n"
 "\n"
@@ -19384,17 +19401,16 @@ msgid ""
 msgstr ""
 "こんにちは、\n"
 "\n"
-"誰かが %(address)s を送信者アドレスとして %(instance)s に使用するよう"
-"リクエストしました。検証が完了すると、%(instance)s から送信されたメールはこの"
-"アドレスを送信者として表示できます。\n"
+"誰かが %(address)s を送信者アドレスとして %(instance)s に使用するようリクエス"
+"トしました。検証が完了すると、%(instance)s から送信されたメールはこのアドレス"
+"を送信者として表示できます。\n"
 "\n"
 "もしこれがあなたであれば、設定フォームに以下のコードを入力してください。\n"
 "\n"
 "…%(code)s\n"
 "\n"
-"このコードを誰にも共有しないでください。ただし、このアドレスをこの目的で使用"
-"することを許可したい場合は除きます。%(instance)sのチームは、決してあなたにそ"
-"れを求めることはありません。\n"
+"このコードを誰にも共有しないでください。%(instance)sのチームは、決してあなた"
+"にそれを求めることはありません。\n"
 "\n"
 "もしこのメールをご依頼いただいていない場合は、このメールはご無視いただいて構"
 "いません。\n"
@@ -34,6 +34,8 @@

 import logging
 import time
+from datetime import datetime
+from http.cookies import Morsel
 from urllib.parse import urlparse

 from django.conf import settings
@@ -51,16 +53,12 @@ from django.middleware.csrf import (
 from django.shortcuts import render
 from django.urls import set_urlconf
 from django.utils.cache import patch_vary_headers
-from django.utils.decorators import decorator_from_middleware
 from django.utils.deprecation import MiddlewareMixin
 from django.utils.http import http_date
 from django_scopes import scopes_disabled

 from pretix.base.models import Event, Organizer
-from pretix.helpers.cookies import (
-    get_all_values_of_cookie, set_cookie_without_samesite,
-    thoroughly_delete_cookie,
-)
+from pretix.helpers.cookies import set_cookie_without_samesite
 from pretix.multidomain.models import KnownDomain

 logger = logging.getLogger(__name__)
@@ -183,23 +181,9 @@ class SessionMiddleware(BaseSessionMiddleware):
            # The session should be deleted only if the session is entirely empty
            is_secure = request.scheme == 'https'
            if '__Host-' + settings.SESSION_COOKIE_NAME in request.COOKIES and empty:
-                # response.delete_cookie does not work as we might have set a partitioned cookie
-                thoroughly_delete_cookie(
-                    response,
-                    '__Host-' + settings.SESSION_COOKIE_NAME,
-                    path=settings.SESSION_COOKIE_PATH,
-                    secure=is_secure,
-                    httponly=settings.SESSION_COOKIE_HTTPONLY or None
-                )
+                response.delete_cookie('__Host-' + settings.SESSION_COOKIE_NAME)
            elif settings.SESSION_COOKIE_NAME in request.COOKIES and empty:
-                # response.delete_cookie does not work as we might have set a partitioned cookie
-                thoroughly_delete_cookie(
-                    response,
-                    settings.SESSION_COOKIE_NAME,
-                    path=settings.SESSION_COOKIE_PATH,
-                    secure=is_secure,
-                    httponly=settings.SESSION_COOKIE_HTTPONLY or None
-                )
+                response.delete_cookie(settings.SESSION_COOKIE_NAME)
            else:
                if accessed:
                    patch_vary_headers(response, ('Cookie',))
@@ -216,21 +200,15 @@ class SessionMiddleware(BaseSessionMiddleware):
                    if response.status_code != 500:
                        request.session.save()
                        if is_secure and settings.SESSION_COOKIE_NAME in request.COOKIES:  # remove legacy cookie
-                            # response.delete_cookie does not work as we might have set a partitioned cookie
-                            thoroughly_delete_cookie(
-                                response,
-                                settings.SESSION_COOKIE_NAME,
-                                path=settings.SESSION_COOKIE_PATH,
-                                secure=is_secure,
-                                httponly=settings.SESSION_COOKIE_HTTPONLY or None
-                            )
+                            response.delete_cookie(settings.SESSION_COOKIE_NAME)
+                            response.delete_cookie(settings.SESSION_COOKIE_NAME, samesite="None")
                        set_cookie_without_samesite(
                            request, response,
                            '__Host-' + settings.SESSION_COOKIE_NAME if is_secure else settings.SESSION_COOKIE_NAME,
                            request.session.session_key, max_age=max_age,
                            expires=expires,
                            path=settings.SESSION_COOKIE_PATH,
-                            secure=is_secure,
+                            secure=request.scheme == 'https',
                            httponly=settings.SESSION_COOKIE_HTTPONLY or None
                        )
        return response
@@ -275,74 +253,75 @@ class CsrfViewMiddleware(BaseCsrfMiddleware):
            if request.session.get(CSRF_SESSION_KEY) != request.META["CSRF_COOKIE"]:
                request.session[CSRF_SESSION_KEY] = request.META["CSRF_COOKIE"]
        else:
+            is_secure = request.scheme == 'https'
            # Set the CSRF cookie even if it's already set, so we renew
            # the expiry timer.
-
-            # remove legacy cookie
-            if request.is_secure() and settings.CSRF_COOKIE_NAME in request.COOKIES:
-                thoroughly_delete_cookie(
-                    response,
-                    settings.CSRF_COOKIE_NAME,
-                    path=settings.CSRF_COOKIE_PATH,
-                    secure=request.is_secure(),
-                    httponly=settings.CSRF_COOKIE_HTTPONLY
-                )
+            if is_secure and settings.CSRF_COOKIE_NAME in request.COOKIES:  # remove legacy cookie
+                response.delete_cookie(settings.CSRF_COOKIE_NAME)
+                response.delete_cookie(settings.CSRF_COOKIE_NAME, samesite="None")

            handle_duplicated_csrftoken(request, response)

            set_cookie_without_samesite(
                request, response,
-                '__Host-' + settings.CSRF_COOKIE_NAME if request.is_secure() else settings.CSRF_COOKIE_NAME,
+                '__Host-' + settings.CSRF_COOKIE_NAME if is_secure else settings.CSRF_COOKIE_NAME,
                request.META["CSRF_COOKIE"],
                max_age=settings.CSRF_COOKIE_AGE,
                path=settings.CSRF_COOKIE_PATH,
-                secure=request.is_secure(),
+                secure=is_secure,
                httponly=settings.CSRF_COOKIE_HTTPONLY
            )
            # Content varies with the CSRF cookie, so set the Vary header.
            patch_vary_headers(response, ('Cookie',))

-    def process_response(self, request, response):
-        if (
-            not settings.CSRF_USE_SESSIONS
-            and request.is_secure()
-            and settings.CSRF_COOKIE_NAME in response.cookies
-            and response.cookies[settings.CSRF_COOKIE_NAME].value
-        ):
-            logger.warning("Usage of djangos CsrfViewMiddleware detected (legacy cookie found in response). "
-                           "This may be caused by using csrf_project or requires_csrf_token from django.views.decorators.csrf. "
-                           "Use the pretix.multidomain.middlewares equivalent instead.")
-
-        return super().process_response(request, response)
-

 def handle_duplicated_csrftoken(request, response):
-    # Due to a Safari bug, in some browser, two csrftoken cookies can exist:
-    # one unpartitioned, one partitioned. This function generates an additional
+    # Due to a Safari bug, in some browser, two csrftoken cookies with different values
+    # exist: one unpartitioned, one partitioned. This function generates an additional
    # Set-Cookie header to get rid of the unpartitioned one.

    cookie_name = '__Host-' + settings.CSRF_COOKIE_NAME

-    if request.is_secure() and cookie_name in request.COOKIES:
+    if request.scheme == 'https' and cookie_name in request.COOKIES:
        values = get_all_values_of_cookie(request.headers.get('Cookie'), cookie_name)
        if len(values) > 1:
            logger.info('Trying to remove duplicated %s cookies: %r', cookie_name, values)
-            thoroughly_delete_cookie(
-                response,
-                cookie_name,
-                secure=request.is_secure(),
-                path=settings.CSRF_COOKIE_PATH,
-                httponly=settings.CSRF_COOKIE_HTTPONLY
-            )
+
+            # Make sure the set_cookie_without_samesite below will add a new item in the dictionary, placing
+            # it below our deletion header.
+            response.cookies.pop(cookie_name, None)
+
+            # Add the deletion Set-Cookie header to the cookie dict under a wrong name, so it doesn't get
+            # overwritten by the set_cookie_without_samesite call below.  This works because the code in
+            # django.core.handlers.wsgi/asgi, that generates the actual Set-Cookie headers, only iterates
+            # over cookie.values(), ignoring the keys.
+            response.cookies['___DELETECOOKIE___' + cookie_name] = make_delete_morsel(cookie_name)


-csrf_protect = decorator_from_middleware(CsrfViewMiddleware)
+def get_all_values_of_cookie(cookie_header, cookie_name):
+    # like django.http.cookie.parse_cookie, but returns all values of duplicated cookies instead of only the last
+    values = list()
+    if not cookie_header:
+        return values
+    for chunk in cookie_header.split(";"):
+        if "=" in chunk:
+            key, val = chunk.split("=", 1)
+        else:
+            # Assume an empty name per
+            # https://bugzilla.mozilla.org/show_bug.cgi?id=169091
+            key, val = "", chunk
+        key, val = key.strip(), val.strip()
+        if key == cookie_name:
+            values.append(val)
+    return values


-class _EnsureCsrfToken(CsrfViewMiddleware):
-    # Behave like CsrfViewMiddleware but don't reject requests or log warnings.
-    def _reject(self, request, reason):
-        return None
-
-
-requires_csrf_token = decorator_from_middleware(_EnsureCsrfToken)
+def make_delete_morsel(name):
+    m = Morsel()
+    m.set(name, '', '')
+    m['expires'] = datetime.utcfromtimestamp(0).strftime("%a, %d %b %Y %H:%M:%S GMT")
+    m['samesite'] = 'None'
+    m['secure'] = True
+    m['path'] = settings.CSRF_COOKIE_PATH
+    m['httponly'] = settings.CSRF_COOKIE_HTTPONLY
+    return m
@@ -26,7 +26,6 @@ from collections import defaultdict
 from django.dispatch import receiver
 from django.template.loader import get_template
 from django.urls import resolve, reverse
-from django.utils.safestring import mark_safe
 from django.utils.translation import gettext_lazy as _

 from pretix.base.logentrytypes import EventLogEntryType, log_entry_types
@@ -154,7 +153,7 @@ def control_order_position_info(sender: Event, position, request, order: Order,
        'event': sender,
        'position': position
    }
-    return mark_safe(template.render(ctx, request=request).strip())
+    return template.render(ctx, request=request).strip()


@receiver(order_info, dispatch_uid="badges_control_order_info")
@@ -162,6 +162,7 @@ class XHRView(View):

        paypal_order = prov._create_paypal_order(request, None, cart_total)
        r = JsonResponse(paypal_order.dict() if paypal_order else {})
+        r._csp_ignore = True
        return r


@@ -28,7 +28,7 @@ from decimal import Decimal
 from django import forms
 from django.db.models import F, Sum
 from django.db.models.functions import Coalesce
-from django.utils.formats import date_format
+from django.utils.formats import date_format, localize
 from django.utils.html import escape
 from django.utils.timezone import now
 from django.utils.translation import gettext as _, gettext_lazy, pgettext_lazy
@@ -43,7 +43,7 @@ from pretix.base.exporter import BaseExporter
 from pretix.base.models import (
    GiftCardTransaction, OrderFee, OrderPayment, OrderRefund, Transaction,
 )
-from pretix.base.templatetags.money import money_filter, tax_rate_format
+from pretix.base.templatetags.money import money_filter
 from pretix.base.timeframes import (
    DateFrameField,
    resolve_timeframe_to_datetime_start_inclusive_end_exclusive,
@@ -382,7 +382,7 @@ class ReportExporter(ReportlabExportMixin, BaseExporter):
                        else "",
                        tstyle_right,
                    ),
-                    PlainTextParagraph(tax_rate_format(r["tax_rate"]) + " %", tstyle_right),
+                    PlainTextParagraph(localize(r["tax_rate"].normalize()) + " %", tstyle_right),
                    PlainTextParagraph(str(r["sum_cont"]), tstyle_right),
                    PlainTextParagraph(
                        money_filter(r["sum_price"] - r["sum_tax"], currency), tstyle_right
@@ -408,7 +408,7 @@ class ReportExporter(ReportlabExportMixin, BaseExporter):
                    [
                        PlainTextParagraph(_("Sum"), tstyle),
                        PlainTextParagraph("", tstyle_right),
-                        PlainTextParagraph(tax_rate_format(tax_rate) + " %", tstyle_right),
+                        PlainTextParagraph(localize(tax_rate.normalize()) + " %", tstyle_right),
                        PlainTextParagraph("", tstyle_right),
                        PlainTextParagraph(
                            money_filter(
@@ -323,7 +323,7 @@ $(function () {
            }
        }
    } else if ($("#stripe_payment_intent_next_action_redirect_url").length) {
-        let payment_intent_next_action_redirect_url = $.trim($("#stripe_payment_intent_next_action_redirect_url").html());
+        let payment_intent_next_action_redirect_url = JSON.parse($("#stripe_payment_intent_next_action_redirect_url").html());
        pretixstripe.handlePaymentRedirectAction(payment_intent_next_action_redirect_url);
    } else if ($.trim($("#stripe_payment_intent_action_type").html()) === "promptpay_display_qr_code") {
        waitingDialog.hide();
@@ -432,4 +432,4 @@ $(function () {
            }
        }
    );
-});
+});
@@ -9,7 +9,7 @@
    <script type="text/plain" id="stripe_payment_intent_action_type">{{ payment_intent_action_type }}</script>
    <script type="text/plain" id="stripe_payment_intent_client_secret">{{ payment_intent_client_secret }}</script>
    {% if payment_intent_next_action_redirect_url %}
-        <script type="text/plain" id="stripe_payment_intent_next_action_redirect_url">{{ payment_intent_next_action_redirect_url|safe }}</script>
+        {{ payment_intent_next_action_redirect_url|json_script:"stripe_payment_intent_next_action_redirect_url" }}
    {% endif %}
    {% if payment_intent_redirect_action_handling %}
        <script type="text/plain" id="stripe_payment_intent_redirect_action_handling">{{ payment_intent_redirect_action_handling }}</script>
@@ -189,7 +189,7 @@ def control_order_position_info(sender: Event, position, request, order, **kwarg
        'position': position,
        'layouts': layouts,
    }
-    return template.render(ctx, request=request)
+    return template.render(ctx, request=request).strip()


 override_layout = EventPluginSignal()
@@ -173,11 +173,11 @@
                                                <small>{% trans "incl. taxes" %}</small>
                                            {% endif %}
                                        {% elif var.display_price.rate and var.display_price.gross and event.settings.display_net_prices %}
-                                            <small>{% blocktrans trimmed with rate=var.display_price.rate|tax_rate_format name=var.display_price.name %}
+                                            <small>{% blocktrans trimmed with rate=var.display_price.rate|floatformat:-2 name=var.display_price.name %}
                                                <strong>plus</strong> {{ rate }}% {{ name }}
                                            {% endblocktrans %}</small>
                                        {% elif var.display_price.rate and var.display_price.gross %}
-                                            <small>{% blocktrans trimmed with rate=var.display_price.rate|tax_rate_format name=var.display_price.name %}
+                                            <small>{% blocktrans trimmed with rate=var.display_price.rate|floatformat:-2 name=var.display_price.name %}
                                                incl. {{ rate }}% {{ name }}
                                            {% endblocktrans %}</small>
                                        {% endif %}
@@ -313,11 +313,11 @@
                                        <small>{% trans "incl. taxes" %}</small>
                                    {% endif %}
                                {% elif item.display_price.rate and item.display_price.gross and event.settings.display_net_prices %}
-                                    <small>{% blocktrans trimmed with rate=item.display_price.rate|tax_rate_format name=item.display_price.name %}
+                                    <small>{% blocktrans trimmed with rate=item.display_price.rate|floatformat:-2 name=item.display_price.name %}
                                        <strong>plus</strong> {{ rate }}% {{ name }}
                                    {% endblocktrans %}</small>
                                {% elif item.display_price.rate and item.display_price.gross %}
-                                    <small>{% blocktrans trimmed with rate=item.display_price.rate|tax_rate_format name=item.display_price.name %}
+                                    <small>{% blocktrans trimmed with rate=item.display_price.rate|floatformat:-2 name=item.display_price.name %}
                                        incl. {{ rate }}% {{ name }}
                                    {% endblocktrans %}</small>
                                {% endif %}
@@ -357,7 +357,7 @@
                        {% if line.tax_rate and line.total %}
                            <br />
                            <small>
-                                {% blocktrans trimmed with rate=line.tax_rate|tax_rate_format taxname=line.tax_rule.name|default:s_taxes %}
+                                {% blocktrans trimmed with rate=line.tax_rate|floatformat:-2 taxname=line.tax_rule.name|default:s_taxes %}
                                    <strong>plus</strong> {{ rate }}% {{ taxname }}
                                {% endblocktrans %}
                            </small>
@@ -367,7 +367,7 @@
                        {% if line.tax_rate and line.total %}
                            <br />
                            <small>
-                                {% blocktrans trimmed with rate=line.tax_rate|tax_rate_format taxname=line.tax_rule.name|default:s_taxes %}
+                                {% blocktrans trimmed with rate=line.tax_rate|floatformat:-2 taxname=line.tax_rule.name|default:s_taxes %}
                                    incl. {{ rate }}% {{ taxname }}
                                {% endblocktrans %}
                            </small>
@@ -416,7 +416,7 @@
                        {% if fee.tax_rate %}
                            <br />
                            <small>
-                                {% blocktrans trimmed with rate=fee.tax_rate|tax_rate_format taxname=fee.tax_rule.name|default:s_taxes %}
+                                {% blocktrans trimmed with rate=fee.tax_rate|floatformat:-2 taxname=fee.tax_rule.name|default:s_taxes %}
                                    <strong>plus</strong> {{ rate }}% {{ taxname }}
                                {% endblocktrans %}
                            </small>
@@ -426,7 +426,7 @@
                        {% if fee.tax_rate %}
                            <br />
                            <small>
-                                {% blocktrans trimmed with rate=fee.tax_rate|tax_rate_format taxname=fee.tax_rule.name|default:s_taxes %}
+                                {% blocktrans trimmed with rate=fee.tax_rate|floatformat:-2 taxname=fee.tax_rule.name|default:s_taxes %}
                                    incl. {{ rate }}% {{ taxname }}
                                {% endblocktrans %}
                            </small>
@@ -207,13 +207,13 @@
                                        {% endif %}
                                    {% elif var.display_price.rate and var.display_price.gross and event.settings.display_net_prices %}
                                        <small data-toggle="tooltip" title="{% blocktrans trimmed with value=var.display_price.gross|money:event.currency %}{{ value }} incl. taxes{% endblocktrans %}" data-placement="bottom">
-                                            {% blocktrans trimmed with rate=var.display_price.rate|tax_rate_format name=var.display_price.name %}
+                                            {% blocktrans trimmed with rate=var.display_price.rate|floatformat:-2 name=var.display_price.name %}
                                                <strong>plus</strong> {{ rate }}% {{ name }}
                                            {% endblocktrans %}
                                        </small>
                                    {% elif var.display_price.rate and var.display_price.gross %}
                                        <small data-toggle="tooltip" title="{% blocktrans trimmed with value=var.display_price.net|money:event.currency %}{{ value }} without taxes{% endblocktrans %}" data-placement="bottom">
-                                            {% blocktrans trimmed with rate=var.display_price.rate|tax_rate_format name=var.display_price.name %}
+                                            {% blocktrans trimmed with rate=var.display_price.rate|floatformat:-2 name=var.display_price.name %}
                                                incl. {{ rate }}% {{ name }}
                                            {% endblocktrans %}
                                        </small>
@@ -372,13 +372,13 @@
                            {% endif %}
                        {% elif item.display_price.rate and item.display_price.gross and event.settings.display_net_prices %}
                            <small data-toggle="tooltip" title="{% blocktrans trimmed with value=item.display_price.gross|money:event.currency %}{{ value }} incl. taxes{% endblocktrans %}" data-placement="bottom">
-                                {% blocktrans trimmed with rate=item.display_price.rate|tax_rate_format name=item.display_price.name %}
+                                {% blocktrans trimmed with rate=item.display_price.rate|floatformat:-2 name=item.display_price.name %}
                                    <strong>plus</strong> {{ rate }}% {{ name }}
                                {% endblocktrans %}
                            </small>
                        {% elif item.display_price.rate and item.display_price.gross %}
                            <small data-toggle="tooltip" title="{% blocktrans trimmed with value=item.display_price.net|money:event.currency %}{{ value }} without taxes{% endblocktrans %}" data-placement="bottom">
-                                {% blocktrans trimmed with rate=item.display_price.rate|tax_rate_format name=item.display_price.name %}
+                                {% blocktrans trimmed with rate=item.display_price.rate|floatformat:-2 name=item.display_price.name %}
                                    incl. {{ rate }}% {{ name }}
                                {% endblocktrans %}
                            </small>
@@ -201,13 +201,13 @@
                                                {% endif %}
                                                {% elif var.display_price.rate and var.display_price.gross and event.settings.display_net_prices %}
                                                    <small data-toggle="tooltip" title="{% blocktrans trimmed with value=var.display_price.gross|money:event.currency %}{{ value }} incl. taxes{% endblocktrans %}" data-placement="bottom">
-                                                        {% blocktrans trimmed with rate=var.display_price.rate|tax_rate_format name=var.display_price.name %}
+                                                        {% blocktrans trimmed with rate=var.display_price.rate|floatformat:-2 name=var.display_price.name %}
                                                            <strong>plus</strong> {{ rate }}% {{ name }}
                                                        {% endblocktrans %}
                                                    </small>
                                                {% elif var.display_price.rate and var.display_price.gross %}
                                                    <small data-toggle="tooltip" title="{% blocktrans trimmed with value=var.display_price.net|money:event.currency %}{{ value }} without taxes{% endblocktrans %}" data-placement="bottom">
-                                                        {% blocktrans trimmed with rate=var.display_price.rate|tax_rate_format name=var.display_price.name %}
+                                                        {% blocktrans trimmed with rate=var.display_price.rate|floatformat:-2 name=var.display_price.name %}
                                                            incl. {{ rate }}% {{ name }}
                                                        {% endblocktrans %}
                                                    </small>
@@ -356,13 +356,13 @@
                                        {% endif %}
                                    {% elif item.display_price.rate and item.display_price.gross and event.settings.display_net_prices %}
                                        <small data-toggle="tooltip" title="{% blocktrans trimmed with value=item.display_price.gross|money:event.currency %}{{ value }} incl. taxes{% endblocktrans %}" data-placement="bottom">
-                                            {% blocktrans trimmed with rate=item.display_price.rate|tax_rate_format name=item.display_price.name %}
+                                            {% blocktrans trimmed with rate=item.display_price.rate|floatformat:-2 name=item.display_price.name %}
                                                <strong>plus</strong> {{ rate }}% {{ name }}
                                            {% endblocktrans %}
                                        </small>
                                    {% elif item.display_price.rate and item.display_price.gross %}
                                        <small data-toggle="tooltip" title="{% blocktrans trimmed with value=item.display_price.net|money:event.currency %}{{ value }} without taxes{% endblocktrans %}" data-placement="bottom">
-                                            {% blocktrans trimmed with rate=item.display_price.rate|tax_rate_format name=item.display_price.name %}
+                                            {% blocktrans trimmed with rate=item.display_price.rate|floatformat:-2 name=item.display_price.name %}
                                                incl. {{ rate }}% {{ name }}
                                            {% endblocktrans %}
                                        </small>
@@ -44,6 +44,7 @@ from django.utils.http import url_has_allowed_host_and_scheme
 from django.utils.safestring import mark_safe
 from django.utils.translation import gettext_lazy as _
 from django.views.decorators.cache import never_cache
+from django.views.decorators.csrf import csrf_protect
 from django.views.decorators.debug import sensitive_post_parameters
 from django.views.generic import FormView, ListView, View

@@ -100,6 +101,7 @@ class LoginView(RedirectBackMixin, FormView):
    redirect_authenticated_user = True

    @method_decorator(sensitive_post_parameters())
+    @method_decorator(csrf_protect)
    @method_decorator(never_cache)
    def dispatch(self, request, *args, **kwargs):
        if not request.organizer.settings.customer_accounts:
@@ -211,6 +213,7 @@ class RegistrationView(RedirectBackMixin, FormView):
    redirect_authenticated_user = True

    @method_decorator(sensitive_post_parameters())
+    @method_decorator(csrf_protect)
    @method_decorator(never_cache)
    def dispatch(self, request, *args, **kwargs):
        if not request.organizer.settings.customer_accounts:
@@ -254,6 +257,7 @@ class SetPasswordView(FormView):
    template_name = 'pretixpresale/organizers/customer_setpassword.html'

    @method_decorator(sensitive_post_parameters())
+    @method_decorator(csrf_protect)
    @method_decorator(never_cache)
    def dispatch(self, request, *args, **kwargs):
        if not request.organizer.settings.customer_accounts:
@@ -297,6 +301,7 @@ class ResetPasswordView(FormView):
    template_name = 'pretixpresale/organizers/customer_resetpw.html'

    @method_decorator(sensitive_post_parameters())
+    @method_decorator(csrf_protect)
    @method_decorator(never_cache)
    def dispatch(self, request, *args, **kwargs):
        if not request.organizer.settings.customer_accounts:
@@ -522,6 +527,7 @@ class ChangePasswordView(CustomerAccountBaseMixin, FormView):
    form_class = ChangePasswordForm

    @method_decorator(sensitive_post_parameters())
+    @method_decorator(csrf_protect)
    @method_decorator(never_cache)
    def dispatch(self, request, *args, **kwargs):
        if not request.organizer.settings.customer_accounts:
@@ -555,6 +561,7 @@ class ChangeInformationView(CustomerAccountBaseMixin, FormView):
    form_class = ChangeInfoForm

    @method_decorator(sensitive_post_parameters())
+    @method_decorator(csrf_protect)
    @method_decorator(never_cache)
    def dispatch(self, request, *args, **kwargs):
        if not request.organizer.settings.customer_accounts:
@@ -662,6 +669,7 @@ class SSOLoginView(RedirectBackMixin, View):
    redirect_authenticated_user = True

    @method_decorator(sensitive_post_parameters())
+    @method_decorator(csrf_protect)
    @method_decorator(never_cache)
    def dispatch(self, request, *args, **kwargs):
        if not request.organizer.settings.customer_accounts:
@@ -724,6 +732,7 @@ class SSOLoginReturnView(RedirectBackMixin, View):
    redirect_authenticated_user = True

    @method_decorator(sensitive_post_parameters())
+    @method_decorator(csrf_protect)
    @method_decorator(never_cache)
    def dispatch(self, request, *args, **kwargs):
        if not request.organizer.settings.customer_accounts:
@@ -48,6 +48,7 @@ def theme_css(request, **kwargs):
    obj = getattr(request, "event", request.organizer)
    css = get_theme_vars_css(obj, widget=False)
    resp = HttpResponse(css, content_type="text/css")
+    resp._csp_ignore = True
    resp["Access-Control-Allow-Origin"] = "*"
    if "version" in request.GET:
        resp["Expires"] = http_date(time.time() + 3600 * 24 * 30)
@@ -164,6 +164,7 @@ def widget_css(request, version, **kwargs):
    css = f"/* v{version} */\n" + theme_css + widget_css

    resp = FileResponse(css, content_type='text/css')
+    resp._csp_ignore = True
    resp['Access-Control-Allow-Origin'] = '*'
    return resp

@@ -245,6 +246,7 @@ def widget_js(request, version, lang, **kwargs):
    cached_js = cache.get(cache_prefix)
    if cached_js and not settings.DEBUG:
        resp = HttpResponse(cached_js, content_type='text/javascript')
+        resp._csp_ignore = True
        resp['Access-Control-Allow-Origin'] = '*'
        return resp

@@ -276,6 +278,7 @@ def widget_js(request, version, lang, **kwargs):
            gs.settings.set(checksum_key, checksum)
            cache.set(cache_prefix, data, 3600 * 4)
        resp = HttpResponse(data, content_type='text/javascript')
+    resp._csp_ignore = True
    resp['Access-Control-Allow-Origin'] = '*'
    return resp

@@ -411,6 +414,7 @@ class WidgetAPIProductList(EventListMixin, View):
        self.post_process(data)
        resp = JsonResponse(data)
        resp['Access-Control-Allow-Origin'] = '*'
+        resp._csp_ignore = True
        return resp

    def get(self, request, *args, **kwargs):
@@ -262,9 +262,6 @@ MAIL_FROM_NOTIFICATIONS = config.get('mail', 'from_notifications', fallback=MAIL
 MAIL_FROM_ORGANIZERS = config.get('mail', 'from_organizers', fallback=MAIL_FROM)
 MAIL_CUSTOM_SENDER_VERIFICATION_REQUIRED = config.getboolean('mail', 'custom_sender_verification_required', fallback=True)
 MAIL_CUSTOM_SENDER_SPF_STRING = config.get('mail', 'custom_sender_spf_string', fallback='')
-MAIL_CUSTOM_SENDER_DKIM_SELECTOR = config.get('mail', 'custom_sender_dkim_selector', fallback='')
-MAIL_CUSTOM_SENDER_DKIM_CNAME = config.get('mail', 'custom_sender_dkim_cname', fallback='')
-MAIL_CUSTOM_SENDER_DMARC_REQUIRED = config.getboolean('mail', 'custom_sender_dmarc_required', fallback=False)
 MAIL_CUSTOM_SMTP_ALLOW_PRIVATE_NETWORKS = config.getboolean('mail', 'custom_smtp_allow_private_networks', fallback=DEBUG)
 EMAIL_HOST = config.get('mail', 'host', fallback='localhost')
 EMAIL_PORT = config.getint('mail', 'port', fallback=25)
@@ -1,7 +1,4 @@
 /*globals $, gettext, fabric, PDFJS*/
-
-window.module = {}  // Hack to load ajv-compiled schema without actual module loading
-
 fabric.Poweredby = fabric.util.createClass(fabric.Image, {
    type: 'poweredby',

@@ -222,6 +219,7 @@ var editor = {
    uploaded_file_id: null,
    _window_loaded: false,
    _fabric_loaded: false,
+    schema: null,

    _px2mm: function (v) {
        return v / editor.pdf_scale / 72 * editor.pdf_page.userUnit * 25.4;
@@ -1322,11 +1320,14 @@ var editor = {

    _source_save: function () {
        try {
+            var Ajv = window.ajv2020
+            var ajv = new Ajv()
+            var validate = ajv.compile(editor.schema)
            var data = JSON.parse($("#source-textarea").val())
-            var valid = validate30(data)
+            var valid = validate(data)

            if (!valid) {
-                console.log(validate30.errors)
+                console.log(validate.errors)
                alert("Invalid input syntax. If you're familiar with this, check out the developer console for a full " +
                      "error log. Otherwise, please contact support.")
            } else {
@@ -1462,6 +1463,10 @@ var editor = {
            editor._update_save_button();
        });
        $("#pdf-info-width, #pdf-info-height").bind('change input', editor._paper_size_warning);
+
+        $.getJSON($("#schema-url").text(), function (data) {
+            editor.schema = data;
+        })
    }
 };

@@ -874,14 +874,6 @@ function setup_basics(el) {
        });
    });

-    el.find(".qrcode-canvas").each(function () {
-        $(this).qrcode(
-            {
-                text: $.trim($($(this).attr("data-qrdata")).html())
-            }
-        );
-    });
-
    el.find(".propagated-settings-box").find("input, textarea, select").not("[readonly]")
        .attr("data-propagated-locked", "true").prop("readonly", true);

@@ -1,6 +1,5 @@
 {
  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$comment": "If the schema is changed, regenerate pdf-layout.validate.js with $ ajv compile -s ./pretix/static/schema/pdf-layout.schema.json --spec=draft2020 -o ./pretix/static/schema/pdf-layout.validate.js",
  "title": "Ticket Layout",
  "description": "Dynamic elements for a PDF layout",
  "type": "array",
@@ -258,7 +258,7 @@ def test_list_list(token_client, organizer, event, clist, item, subevent, django
    res["id"] = clist.pk
    res["limit_products"] = [item.pk]

-    with django_assert_num_queries(9):
+    with django_assert_num_queries(11):
        resp = token_client.get('/api/v1/organizers/{}/events/{}/checkinlists/'.format(organizer.slug, event.slug))
    assert resp.status_code == 200
    assert [res] == resp.data['results']
@@ -437,7 +437,7 @@ def test_list_all_items_positions(token_client, organizer, event, clist, clist_a
        p3["addon_to"] = p1["id"]

    # All items
-    with django_assert_num_queries(22):
+    with django_assert_num_queries(24):
        resp = token_client.get('/api/v1/organizers/{}/events/{}/checkinlists/{}/positions/?ordering=positionid'.format(
            organizer.slug, event.slug, clist_all.pk
        ))
@@ -1127,7 +1127,6 @@ def test_store_failed(token_client, organizer, clist, event, order):
        organizer.slug, event.slug, clist.pk,
    ), {
        'raw_barcode': '123456',
-        'raw_source_type': 'nfc_uid',
        'nonce': '4321',
        'error_reason': 'invalid'
    }, format='json')
@@ -1865,7 +1865,7 @@ def test_event_expand_seat_filter_and_querycount(token_client, organizer, event,
    assert resp.status_code == 200
    event.refresh_from_db()

-    with assert_num_queries(10):
+    with assert_num_queries(12):
        resp = token_client.get('/api/v1/organizers/{}/events/{}/seats/'
                                '?expand=orderposition&expand=cartposition&expand=voucher&is_available=true'
                                .format(organizer.slug, event.slug))
@@ -1875,7 +1875,7 @@ def test_event_expand_seat_filter_and_querycount(token_client, organizer, event,
    with scope(organizer=organizer):
        v0 = event.vouchers.create(item=item, seat=event.seats.get(seat_guid='0-0'))

-    with assert_num_queries(12):
+    with assert_num_queries(14):
        resp = token_client.get('/api/v1/organizers/{}/events/{}/seats/'
                                '?expand=orderposition&expand=cartposition&expand=voucher&is_available=false'
                                .format(organizer.slug, event.slug))
@@ -1883,7 +1883,7 @@ def test_event_expand_seat_filter_and_querycount(token_client, organizer, event,
        assert len(resp.data['results']) == 1
        assert resp.data['results'][0]['voucher']['id'] == v0.pk

-    with assert_num_queries(10):
+    with assert_num_queries(12):
        resp = token_client.get('/api/v1/organizers/{}/events/{}/seats/'
                                '?expand=orderposition&expand=cartposition&expand=voucher&is_available=true'
                                .format(organizer.slug, event.slug))
@@ -1894,7 +1894,7 @@ def test_event_expand_seat_filter_and_querycount(token_client, organizer, event,
        v1 = event.vouchers.create(item=item, seat=event.seats.get(seat_guid='0-1'))
        v2 = event.vouchers.create(item=item, seat=event.seats.get(seat_guid='0-2'))

-    with assert_num_queries(14):
+    with assert_num_queries(16):
        resp = token_client.get('/api/v1/organizers/{}/events/{}/seats/'
                                '?expand=orderposition&expand=cartposition&expand=voucher&is_available=false'
                                .format(organizer.slug, event.slug))
@@ -425,7 +425,7 @@ def test_item_list(token_client, organizer, event, team, item):

@pytest.mark.django_db
 def test_item_list_queries(token_client, organizer, event, team, item, item3):
-    with assert_num_queries(16):
+    with assert_num_queries(18):
        resp = token_client.get('/api/v1/organizers/{}/events/{}/items/'.format(organizer.slug, event.slug))
        assert resp.status_code == 200

@@ -1166,10 +1166,10 @@ def test_orderposition_list(
        'type': 'entry'
    }]
    if '/events/' in endpoint:
-        with django_assert_num_queries(16):
+        with django_assert_num_queries(18):
            resp = token_client.get(endpoint + '?has_checkin=true')
    else:
-        with django_assert_num_queries(15):
+        with django_assert_num_queries(17):
            resp = token_client.get(endpoint + '?has_checkin=true')
    assert [res] == resp.data['results']

@@ -159,22 +159,6 @@ class OrganizerTest(SoupTest):
        self.orga1.settings.flush()
        assert "mail_from" not in self.orga1.settings._cache()

-    @staticmethod
-    def _fake_dmarc_record(hostname):
-        return {
-            'test.pretix.dev': 'v=DMARC1; p=quarantine; sp=none; adkim=r; aspf=r;',
-            'bad.pretix.dev': None,
-            'none.pretix.dev': None,
-        }[hostname]
-
-    @staticmethod
-    def _fake_cname_record(hostname):
-        return {
-            'pretix._domainkey.test.pretix.dev': 'test-pretix-dev.dkim.pretix.eu.',
-            'pretix._domainkey.bad.pretix.dev': 'example.org',
-            'pretix._domainkey.none.pretix.dev': None,
-        }[hostname]
-
    @staticmethod
    def _fake_spf_record(hostname):
        return {
@@ -188,17 +172,9 @@ class OrganizerTest(SoupTest):
            'spftest.pretix.dev': None,
        }[hostname]

-    @override_settings(
-        MAIL_CUSTOM_SENDER_VERIFICATION_REQUIRED=False,
-        MAIL_CUSTOM_SENDER_SPF_STRING="include:spftest.pretix.dev include:test2.pretix.dev",
-        MAIL_CUSTOM_SENDER_DKIM_SELECTOR="pretix",
-        MAIL_CUSTOM_SENDER_DKIM_CNAME="dkim.pretix.eu.",
-        MAIL_CUSTOM_SENDER_DMARC_REQUIRED=True,
-    )
-    def test_email_setup_no_verification_spf_dmarc_dkim_success(self):
+    @override_settings(MAIL_CUSTOM_SENDER_VERIFICATION_REQUIRED=False, MAIL_CUSTOM_SENDER_SPF_STRING="include:spftest.pretix.dev include:test2.pretix.dev")
+    def test_email_setup_no_verification_spf_success(self):
        self.monkeypatch.setattr("pretix.control.views.mailsetup.get_spf_record", OrganizerTest._fake_spf_record)
-        self.monkeypatch.setattr("pretix.control.views.mailsetup.get_cname_record", OrganizerTest._fake_cname_record)
-        self.monkeypatch.setattr("pretix.control.views.mailsetup.get_dmarc_record", OrganizerTest._fake_dmarc_record)
        doc = self.post_doc(
            '/control/organizer/%s/settings/email/setup' % self.orga1.slug,
            {
@@ -237,43 +213,6 @@ class OrganizerTest(SoupTest):
        # not yet saved
        assert "mail_from" not in self.orga1.settings._cache()

-    @override_settings(MAIL_CUSTOM_SENDER_VERIFICATION_REQUIRED=False,
-                       MAIL_CUSTOM_SENDER_DKIM_SELECTOR="pretix",
-                       MAIL_CUSTOM_SENDER_DKIM_CNAME="dkim.pretix.eu.",
-                       MAIL_CUSTOM_SENDER_SPF_STRING="")
-    def test_email_setup_no_verification_dkim_warning(self):
-        self.monkeypatch.setattr("pretix.control.views.mailsetup.get_cname_record", OrganizerTest._fake_cname_record)
-        doc = self.post_doc(
-            '/control/organizer/%s/settings/email/setup' % self.orga1.slug,
-            {
-                'mode': 'simple',
-                'simple-mail_from': 'test@bad.pretix.dev',
-            },
-            follow=True
-        )
-        assert doc.select('.alert-danger')
-        self.orga1.settings.flush()
-        # not yet saved
-        assert "mail_from" not in self.orga1.settings._cache()
-
-    @override_settings(MAIL_CUSTOM_SENDER_VERIFICATION_REQUIRED=False,
-                       MAIL_CUSTOM_SENDER_DMARC_REQUIRED=True,
-                       MAIL_CUSTOM_SENDER_SPF_STRING="")
-    def test_email_setup_no_verification_dmarc_warning(self):
-        self.monkeypatch.setattr("pretix.control.views.mailsetup.get_dmarc_record", OrganizerTest._fake_dmarc_record)
-        doc = self.post_doc(
-            '/control/organizer/%s/settings/email/setup' % self.orga1.slug,
-            {
-                'mode': 'simple',
-                'simple-mail_from': 'test@bad.pretix.dev',
-            },
-            follow=True
-        )
-        assert doc.select('.alert-danger')
-        self.orga1.settings.flush()
-        # not yet saved
-        assert "mail_from" not in self.orga1.settings._cache()
-
    def test_email_setup_smtp(self):
        self.monkeypatch.setattr("pretix.base.email.test_custom_smtp_backend", lambda b, a: None)
        self.monkeypatch.setattr("socket.gethostbyname", lambda h: "8.8.8.8")
@@ -1,32 +0,0 @@
-#
-# This file is part of pretix (Community Edition).
-#
-# Copyright (C) 2014-2020  Raphael Michel and contributors
-# Copyright (C) 2020-today pretix GmbH and contributors
-#
-# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
-# Public License as published by the Free Software Foundation in version 3 of the License.
-#
-# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
-# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
-# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
-# this file, see <https://pretix.eu/about/en/license>.
-#
-# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
-# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
-# details.
-#
-# You should have received a copy of the GNU Affero General Public License along with this program.  If not, see
-# <https://www.gnu.org/licenses/>.
-#
-from decimal import Decimal
-
-from pretix.helpers.models import _normalize_decimal
-
-
-def test_normalize_decimal():
-    assert str(_normalize_decimal(Decimal("20.0000"))) == "20"
-    assert str(_normalize_decimal(Decimal("20.0001"))) == "20.0001"
-    assert str(_normalize_decimal(Decimal("20.0100"))) == "20.01"
-    assert str(_normalize_decimal(Decimal("2000000.0000"))) == "2000000"
-    assert str(_normalize_decimal(Decimal("0.0001"))) == "0.0001"
@@ -189,8 +189,8 @@ class WidgetCartTest(CartTestMixin, TestCase):
                            "current_unavailability_reason": None,
                            "order_min": None,
                            "max_price": None,
-                            "price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19", "includes_mixed_tax_rate": False},
-                            "suggested_price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19", "includes_mixed_tax_rate": False},
+                            "price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19.00", "includes_mixed_tax_rate": False},
+                            "suggested_price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19.00", "includes_mixed_tax_rate": False},
                            "picture": None,
                            "picture_fullsize": None,
                            "has_variations": False,
@@ -226,9 +226,9 @@ class WidgetCartTest(CartTestMixin, TestCase):
                                    "id": self.shirt_red.pk,
                                    'original_price': None,
                                    "price": {"gross": "14.00", "net": "11.76", "tax": "2.24", "name": "",
-                                              "rate": "19", "includes_mixed_tax_rate": False},
+                                              "rate": "19.00", "includes_mixed_tax_rate": False},
                                    "suggested_price": {"gross": "14.00", "net": "11.76", "tax": "2.24", "name": "",
-                                                        "rate": "19", "includes_mixed_tax_rate": False},
+                                                        "rate": "19.00", "includes_mixed_tax_rate": False},
                                    "description": None,
                                    "avail": [100, None],
                                    "order_max": 2,
@@ -239,9 +239,9 @@ class WidgetCartTest(CartTestMixin, TestCase):
                                    "id": self.shirt_blue.pk,
                                    'original_price': None,
                                    "price": {"gross": "12.00", "net": "10.08", "tax": "1.92", "name": "",
-                                              "rate": "19", "includes_mixed_tax_rate": False},
+                                              "rate": "19.00", "includes_mixed_tax_rate": False},
                                    "suggested_price": {"gross": "12.00", "net": "10.08", "tax": "1.92", "name": "",
-                                                        "rate": "19", "includes_mixed_tax_rate": False},
+                                                        "rate": "19.00", "includes_mixed_tax_rate": False},
                                    "description": None,
                                    "avail": [100, None],
                                    "order_max": 2,
@@ -278,9 +278,9 @@ class WidgetCartTest(CartTestMixin, TestCase):
                        "current_unavailability_reason": None,
                        "order_min": None,
                        "max_price": None,
-                        "price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19",
+                        "price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19.00",
                                  "includes_mixed_tax_rate": False},
-                        "suggested_price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19",
+                        "suggested_price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19.00",
                                            "includes_mixed_tax_rate": False},
                        "picture": None,
                        "picture_fullsize": None,
@@ -343,9 +343,9 @@ class WidgetCartTest(CartTestMixin, TestCase):
                                "id": self.shirt_red.pk,
                                'original_price': None,
                                "price": {"gross": "14.00", "net": "11.76", "tax": "2.24", "name": "",
-                                          "rate": "19", "includes_mixed_tax_rate": False},
+                                          "rate": "19.00", "includes_mixed_tax_rate": False},
                                "suggested_price": {"gross": "14.00", "net": "11.76", "tax": "2.24", "name": "",
-                                                    "rate": "19", "includes_mixed_tax_rate": False},
+                                                    "rate": "19.00", "includes_mixed_tax_rate": False},
                                "description": None,
                                "avail": [100, None],
                                "order_max": 2,
@@ -395,8 +395,8 @@ class WidgetCartTest(CartTestMixin, TestCase):
                            "current_unavailability_reason": None,
                            "order_min": None,
                            "max_price": None,
-                            "price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19", "includes_mixed_tax_rate": False},
-                            "suggested_price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19", "includes_mixed_tax_rate": False},
+                            "price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19.00", "includes_mixed_tax_rate": False},
+                            "suggested_price": {"gross": "23.00", "net": "19.33", "tax": "3.67", "name": "", "rate": "19.00", "includes_mixed_tax_rate": False},
                            "picture": None,
                            "picture_fullsize": None,
                            "has_variations": False,
@@ -481,7 +481,7 @@ class WidgetCartTest(CartTestMixin, TestCase):
                                        'gross': '14.00',
                                        'net': '11.76',
                                        'tax': '2.24',
-                                        'rate': '19',
+                                        'rate': '19.00',
                                        'name': '',
                                        'includes_mixed_tax_rate': False
                                    },
@@ -489,7 +489,7 @@ class WidgetCartTest(CartTestMixin, TestCase):
                                        'gross': '14.00',
                                        'net': '11.76',
                                        'tax': '2.24',
-                                        'rate': '19',
+                                        'rate': '19.00',
                                        'name': '',
                                        'includes_mixed_tax_rate': False
                                    },
@@ -601,7 +601,7 @@ class WidgetCartTest(CartTestMixin, TestCase):
            "net": "19.52",
            "tax": "3.48",
            "name": "MIXED!",
-            "rate": "19",
+            "rate": "19.00",
            "includes_mixed_tax_rate": True
        }
Author	SHA1	Message	Date
Mira Weller	e86500e9fc	Fix templates	2026-07-09 18:09:47 +02:00
Mira Weller	a72e32b82d	Use JSON encoding for data-replace-with-qr	2026-07-09 18:09:41 +02:00
Mira Weller	2e2fe874e1	Remove more usages of \|safe	2026-07-09 18:08:06 +02:00
Mira Weller	ce8c4c649d	Replace \|safe with \|escapejson where appropriate	2026-07-09 18:08:06 +02:00