Richard Schreiber 2b4d93c1ec Widget: serve vite by default, origin-whitelist for vue2

2026-08-06 14:41:28 +02:00

..

customersso

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

datasync

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

exporters

Customer export: Add memberships tab (Z#23228422) (#6253)

2026-07-28 09:06:45 +02:00

forms

Question form: Allow to unset required boolean questions (Z#23239887) (#6382)

2026-07-28 10:59:34 +02:00

invoicing

[SECURITY] Properly escape HTML tags in PDF generation (CVE-2026-57535)

2026-06-25 16:46:13 +02:00

management

Fix isort

2026-07-07 15:43:00 +02:00

migrations

Devices: Store timestamp of last contact (#6453)

2026-08-05 10:57:13 +02:00

models

Device list: Show online status (#6455)

2026-08-06 09:07:20 +02:00

secretgenerators

Update license header (#5540)

2025-10-10 15:32:46 +02:00

services

Merge branch 'html-injection-placeholder' into 'master'

2026-08-05 10:56:46 +02:00

templates

Improve admin-facing email templates (#6216)

2026-07-06 17:25:52 +02:00

templatetags

Improve CSP handling in vite integration; refactor CSP handling into helper functions (Z#23240534) (#6387)

2026-07-21 13:20:31 +02:00

views

Fix customer views using wrong csrf middleware (#6027)

2026-07-10 13:25:40 +02:00

__init__.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

addressvalidation.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

apps.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

auth.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

banlist.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

cache.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

channels.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

context.py

Escape HTML arguments to translation strings (#6399)

2026-07-20 13:15:09 +02:00

decimal.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

email.py

fix import and missing license-header

2026-07-21 18:39:07 +02:00

exporter.py

Exporters: Give access to authentication infos and allow empty permissions (#5979)

2026-04-02 15:44:36 +02:00

i18n.py

Fix babel locale discovery for zh_Hans_US

2026-01-23 11:36:12 +01:00

invoice.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

logentrytype_registry.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

logentrytypes.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

media.py

Check-in API: Add reusable media exchange (#6115)

2026-06-11 16:25:13 +02:00

metrics.py

Use OrderPosition.all instead of .objects in metrics (#6285)

2026-06-21 12:46:07 +02:00

middleware.py

RejectInvalidInputMiddleware: Ignore invalid charsets on body (#6314)

2026-07-28 09:07:16 +02:00

modelimport_orders.py

Fix translation for order import (#6165)

2026-05-12 09:03:34 +02:00

modelimport_vouchers.py

Vouchers: Fix field label inconsistency (Z#23222887) (#5902)

2026-02-17 10:16:12 +01:00

modelimport.py

Order import: handle mixed endings of last line (Z#23230806) (#6066)

2026-04-08 13:25:38 +02:00

notifications.py

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

payment.py

Remove more usages of |safe (#6363)

2026-07-16 13:14:37 +02:00

pdf.py

Add event placeholder support to more fields (#6098)

2026-07-06 17:18:04 +02:00

permissions.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

plugins.py

Respect per-event plugin availability in OrganizerPluginEvents view (#5983)

2026-05-04 11:34:05 +02:00

reldate.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

secrets.py

Prevent changing ticket secret of gift-card-issuing order positions (#6281)

2026-07-16 12:41:27 +02:00

settings.py

Widget: serve vite by default, origin-whitelist for vue2

2026-08-06 14:41:28 +02:00

shredder.py

Mail: Handle all rendering in mail.py, return values for log (#5895)

2026-03-10 09:53:09 +01:00

signals.py

Use SafeStrings for plugin signals returning HTML that should be rendered (#6343)

2026-07-09 17:50:26 +02:00

ticketoutput.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

timeframes.py

Fix incorrect type annotation

2026-03-09 17:48:38 +01:00

timeline.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

timemachine.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

validators.py

Add NoUrlValidator to validators (#6208)

2026-05-22 13:51:28 +02:00