Mira 05a2f411db Improve order secret handling (#4139) ...

- use hmac.compare_digest for all secret comparisons
- use salted_hmac with sha256 instead of plain sha1 for hashed secrets
- move secret handling into helper functions

2024-05-23 14:30:16 +02:00

..

customersso

Open ID: validate requested claims only if config provides them (#3296)

2023-05-08 14:22:19 +02:00

exporters

Answer file export: Allow to filter by subevent (Z#23150581) (#4066)

2024-04-29 18:12:58 +02:00

forms

Widget: Allow passing more invoice data fields (#4162)

2024-05-23 11:19:59 +02:00

management

Export management command: Fix bug in exporter detection

2023-11-30 11:49:16 +01:00

migrations

Improve order secret handling (#4139)

2024-05-23 14:30:16 +02:00

models

Improve order secret handling (#4139)

2024-05-23 14:30:16 +02:00

secretgenerators

New check-in features (#3022)

2023-02-09 09:46:46 +01:00

services

Waiting list: Fix pathological performance on large series with seating (#4169)

2024-05-23 11:51:48 +02:00

templates

File upload: Fix thumbnailing of current image (Z#23151293) (#4098)

2024-04-22 13:14:28 +02:00

templatetags

Calendar: Fix week day header for incomplete months

2024-01-29 13:32:36 +01:00

views

Replace redirect() with redirect_to_url() if we don't need Django's resolution

2023-12-08 15:38:50 +01:00

__init__.py

Upgrade to Django 3.2 (#2056)

2021-05-07 12:00:30 +02:00

addressvalidation.py

Checkout: remove Indonesia from zipcode-validation (#3029)

2023-01-12 16:57:13 +01:00

apps.py

Generalize import process from orders to more models (#4002)

2024-04-03 10:15:30 +02:00

auth.py

Refs #2465 -- Introduce unique identifiers for authentication backends (#2466)

2022-02-23 10:16:35 +01:00

banlist.py

pretix Community Edition moves to AGPLv3-based license (#2023)

2021-04-12 10:33:47 +02:00

cache.py

Checkout: Prefill is_business heuristically (Z#23126061) (#3533)

2023-08-24 17:06:47 +02:00

channels.py

Keep sales-channels in same order (Z#23135800) (#3705)

2023-11-09 10:09:20 +01:00

context.py

Widget: Use absolute URL for poweredby URL (#2131)

2021-06-30 12:40:10 +02:00

decimal.py

pretix Community Edition moves to AGPLv3-based license (#2023)

2021-04-12 10:33:47 +02:00

email.py

Update css-inline requirement from ==0.8.* to ==0.13.*

2024-02-15 13:49:03 +01:00

exporter.py

Badges: reduce memory usage when placing multiple per page (Z#23125583) (#3472)

2023-07-17 12:50:48 +02:00

i18n.py

Upgrade to Django 3.2 (#2056)

2021-05-07 12:00:30 +02:00

invoice.py

Event-specific fonts and Web-Embedded Fonts (Z#23130701) (#3893)

2024-03-26 09:55:08 +01:00

media.py

Reusable Media: Mifare Ultralight AES support (#3335)

2023-07-21 13:45:42 +02:00

metrics.py

Log and count user logins (#4020)

2024-03-28 17:18:51 +01:00

middleware.py

Event-specific fonts and Web-Embedded Fonts (Z#23130701) (#3893)

2024-03-26 09:55:08 +01:00

modelimport_orders.py

Order import: Add expires column (Z#23152985) (#4137)

2024-05-08 09:09:55 +02:00

modelimport_vouchers.py

Voucher import: Fix validation quirks

2024-05-03 16:06:40 +02:00

modelimport.py

Generalize import process from orders to more models (#4002)

2024-04-03 10:15:30 +02:00

notifications.py

Remove RequiredAction model (#2078)

2021-05-17 17:41:59 +02:00

payment.py

Time machine mode [Z#23129725] (#3961)

2024-05-17 10:52:17 +02:00

pdf.py

Simplify merging rotated background PDFs (#4166)

2024-05-23 08:55:51 +02:00

plugins.py

Migrate from pkg_resources to importlib (#3232)

2023-04-18 12:46:13 +02:00

reldate.py

Relative dates: Add UI to specify dates after reference date (#3707)

2023-11-10 12:13:33 +01:00

secrets.py

Allow secret generators to access order datetime (#4110)

2024-04-26 15:09:01 +02:00

settings.py

Fix missing serializer class

2024-05-15 11:01:32 +02:00

shredder.py

Improve logentry shredder function

2023-12-21 22:46:39 +01:00

signals.py

Generalize import process from orders to more models (#4002)

2024-04-03 10:15:30 +02:00

ticketoutput.py

Let plugins prevent the download of individual tickets in an order (#3858)

2024-02-06 17:35:59 +01:00

timeframes.py

API: Fix parsing of time frames for exporters

2023-09-12 16:45:01 +02:00

timeline.py

Add disable date of waiting list to event timeline (#4036)

2024-04-02 17:15:41 +02:00

timemachine.py

Fix time machine permission via pretix_event_access sessions for staff users (#4160)

2024-05-22 13:13:50 +02:00

validators.py

Add "lead" to slug banlist

2024-01-30 10:10:47 +01:00