Raphael Michel ab447bb85f Fix HTML injection in error message (Z#23225396) (#5921) ...

We're not treating it as a security issue as there is no vector to
inject the HTML into other people's browser, only one's own.

2026-02-24 12:48:43 +01:00

..

__init__.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

auth.py

Login: Detect redirect loop and give users useful advice (#5911)

2026-02-22 16:59:14 +01:00

checkin.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

dashboards.py

Import large package lazily to speed up startup (#5636)

2025-12-09 09:52:53 +01:00

datasync.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

discounts.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

event.py

Fix HTML injection in error message (Z#23225396) (#5921)

2026-02-24 12:48:43 +01:00

geo.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

global_settings.py

License check: Recognize license keywords (fixes #5812) (#5815)

2026-01-16 15:33:03 +01:00

item.py

Questions: filter answers by dateFrame (Z#23216406) (#5706)

2025-12-15 12:46:06 +01:00

mail.py

Outgoing mail: Decode unicode in From headers (#5864)

2026-02-03 18:12:12 +01:00

mailsetup.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

main.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

modelimport.py

[SECURITY] Prevent access to arbitrary cached files by UUID (CVE-2025-14881)

2025-12-19 12:59:21 +01:00

oauth.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

orders.py

adds webhooks for giftcards (Z#23205473) (#5834)

2026-02-11 12:51:09 +01:00

organizer.py

include acceptor slug in log/webhook event (#5906)

2026-02-19 10:00:11 +01:00

pdf.py

[SECURITY] Prevent access to arbitrary cached files by UUID (CVE-2025-14881)

2025-12-19 12:59:21 +01:00

search.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

shredder.py

[SECURITY] Prevent access to arbitrary cached files by UUID (CVE-2025-14881)

2025-12-19 12:59:21 +01:00

subevents.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

typeahead.py

Category selection: Search internal names

2025-12-22 11:29:23 +01:00

user.py

Fix token message translation

2026-02-22 17:26:19 +01:00

users.py

Model-based mail queuing

2026-01-30 10:43:02 +01:00

vouchers.py

Fix N+1 queries in API (#5684)

2025-12-03 15:37:40 +01:00

waitinglist.py

Waiting list: Add edit view for entry (Z#23215496) (#5712)

2026-02-23 16:35:24 +01:00