Mira WellerandRaphael Michel 848f7fa0e5 [SECURITY] Fix stored XSS in ticket confirmation page (CVE-2026-13225)

2026-06-25 16:46:13 +02:00

..

forms

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

management

Update license header (#5540)

2025-10-10 15:32:46 +02:00

templates/pretixpresale

[SECURITY] Fix stored XSS in ticket confirmation page (CVE-2026-13225)

2026-06-25 16:46:13 +02:00

views

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

__init__.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

apps.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

checkoutflow.py

[SECURITY] Hardening: Don't use |safe on confirm_messages

2026-06-25 16:46:13 +02:00

context.py

Move request.GET.items to ctx (#5889)

2026-02-12 12:05:08 +01:00

cookies.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

ical.py

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

middleware.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

signals.py

[SECURITY] Hardening: Don't use |safe on confirm_messages

2026-06-25 16:46:13 +02:00

style.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

urls.py

Allow buttons to reuse cart (Z#23226853) (#6047)

2026-04-13 19:32:33 +02:00

utils.py

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00