Raphael Michel 16040f70bb [SECURITY] Add missing permission check for view (CVE-2026-57532)

2026-07-28 12:24:59 +02:00

..

__init__.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

auth.py

User email verifications: Add rate limiting (Z#23232834) (#6219)

2026-07-17 18:35:03 +02:00

checkin.py

Update src/pretix/control/views/checkin.py

2026-07-27 13:54:06 +02:00

dashboards.py

Event-dashboard: Lazy-load warnings (#6421)

2026-07-27 14:40:34 +02:00

datasync.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

discounts.py

Fix #6232 - Remove pagination on categories and discounts (#6237)

2026-06-02 15:58:41 +02:00

event.py

[SECURITY] Add missing permission check for view (CVE-2026-57532)

2026-07-28 12:24:59 +02:00

geo.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

global_settings.py

Do not force PDFs to be downloaded (Z#23225892) (#5994)

2026-04-14 09:12:09 +02:00

item.py

Fix #6232 - Remove pagination on categories and discounts (#6237)

2026-06-02 15:58:41 +02:00

mail.py

Improve CSP handling in vite integration; refactor CSP handling into helper functions (Z#23240534) (#6387)

2026-07-21 13:20:31 +02:00

mailsetup.py

Mail setup: Add DKIM + DMARC validation (#6339)

2026-07-15 11:36:35 +02:00

main.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

modelimport.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

oauth.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

orders.py

Orders: Fix N+1 query issues on order detail and change page (#6390)

2026-07-28 09:08:14 +02:00

organizer.py

Log view: Disable counting the number of pages (Z#23241035) (#6414)

2026-07-24 12:17:48 +02:00

pdf.py

Drop all csp_ignore statements from core (except stripe, for now) (#6337)

2026-07-15 09:39:42 +02:00

search.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

shredder.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

subevents.py

Drop second component from many time picker fields (#6150)

2026-07-17 17:42:51 +02:00

typeahead.py

Add typeahead suggestions for voucher tag field (#6058)

2026-07-06 11:42:05 +02:00

user.py

Improve handling of reauth during async tasks (Z#23238978) (#6381)

2026-07-28 10:59:42 +02:00

users.py

Fix linter issue

2026-07-03 11:00:48 +02:00

vouchers.py

Waiting list: Redirect back after voucher edit (Z#23230178) (#6252)

2026-07-27 23:19:10 +02:00

waitinglist.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00