Raphael MichelandMira Weller c9781f012b [SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602) ...

- Add central framebreaker page via safelink helper
- Update paypal, paypal2 and stripe plugins to use central framebreaker
- Add CSP header to cookies.html

---------

Co-authored-by: Mira Weller <weller@pretix.eu>

2026-07-01 15:15:43 +02:00

..

ajv

Writable API for ticket layouts (#3004)

2023-01-09 13:44:01 +01:00

are-you-sure

Add "Are you sure?"-dialog to dirty forms (#1506)

2019-12-04 13:59:08 +01:00

bootstrap

Move cursor fix for disabled fieldsets from bootstrap to presale

2024-12-06 11:07:11 +01:00

charts

Change typeahead.css and morris.css to scss files

2018-02-04 21:06:44 +01:00

clipboard

Moved static files and celery.py

2017-01-04 22:00:28 +01:00

colorpicker

Bump Django to 4.1.* (#2989)

2023-06-05 09:56:31 +02:00

cropper

Add Question.valid_file_portrait as well as crop editor for images

2021-04-19 15:40:16 +02:00

d3

Visualize custom check-in rules (#2053)

2021-05-05 12:58:00 +02:00

datetimepicker

Fix datetimepicker annoyances

2017-04-17 21:12:52 +02:00

fabric

PDF editor: Upgrade fabric.js (#3196)

2023-04-24 13:17:11 +02:00

fileupload

Fix #41 -- Drag-and-drop ticket editor

2017-05-09 11:10:10 +02:00

fontawesome

Add some user documentation

2017-07-31 18:31:20 +02:00

fonts

pretix Community Edition moves to AGPLv3-based license (#2023)

2021-04-12 10:33:47 +02:00

iframeresizer

pretix Community Edition moves to AGPLv3-based license (#2023)

2021-04-12 10:33:47 +02:00

jquery/js

Update jQuery to 3.6.4 (#3270)

2023-05-02 11:16:06 +02:00

jsi18n/en

Check-in API: Add reusable media exchange (#6115)

2026-06-11 16:25:13 +02:00

leaflet

pretix Community Edition moves to AGPLv3-based license (#2023)

2021-04-12 10:33:47 +02:00

lightbox

Lightbox: Remove .min.js and make dependency on gettext optional

2021-10-18 09:23:12 +02:00

moment

Update moment.js from 2.14 to 2.29

2021-02-04 10:06:38 +01:00

pdfjs

Bump Django to 4.1.* (#2989)

2023-06-05 09:56:31 +02:00

pretixbase

[SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602)

2026-07-01 15:15:43 +02:00

pretixcontrol

Check-in API: Add reusable media exchange (#6115)

2026-06-11 16:25:13 +02:00

pretixpresale

Widget: Fix handling of HTTP-429 errors

2026-06-16 09:11:33 +02:00

rest_framework/scss

Refs #314 -- Read-only REST API (#513)

2017-06-19 11:16:04 +02:00

rrule

Update rrule.js to v2.7.2-14-g9f2061f (#5538) (Z#23210685)

2025-10-10 15:18:54 +02:00

schema

Allow ticket QR code colour to be configured (#4726)

2025-02-24 17:28:59 +01:00

seating

Seating plans: Do not allow GUIDs starting or ending with spaces (#4093)

2024-04-22 11:31:34 +02:00

select2

[A11y] update Select2 to 4.1.0-beta.1 for better a11y (Z#23198765) (#5408)

2025-09-03 08:59:38 +02:00

slider

Replace SCSS compilation with CSS variables (#4191)

2024-06-25 13:01:20 +02:00

sortable

Reordering questions with drag'n'drop (#1433)

2019-10-14 10:54:20 +02:00

typeahead

Change typeahead.css and morris.css to scss files

2018-02-04 21:06:44 +01:00

vuejs

Widget: fix running different versions of Vue on the same page

2023-09-14 10:31:18 +02:00

LICENSE

pretix Community Edition moves to AGPLv3-based license (#2023)

2021-04-12 10:33:47 +02:00