luelistaandGitHub bf066909a7 Remove more usages of |safe (#6363) ...

* Replace |safe with |escapejson where appropriate
* Use JSON encoding for data-replace-with-qr

2026-07-16 13:14:37 +02:00

..

autocheckin

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

badges

Hotfix: Add missing mark_safe after strip

2026-07-10 14:56:48 +02:00

banktransfer

banktransfer import: Fix prefix confusion if shorter event name contains dash (Z#23234167) (#6189)

2026-05-21 13:03:30 +02:00

checkinlists

CheckInListPDF export: remove double html escaping with PlainTextParagraph (Z#23239571) (#6347)

2026-07-07 12:00:17 +02:00

manualpayment

Update license header (#5540)

2025-10-10 15:32:46 +02:00

paypal

[SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602)

2026-07-01 15:15:43 +02:00

paypal2

Drop all csp_ignore statements from core (except stripe, for now) (#6337)

2026-07-15 09:39:42 +02:00

pretixdroid

Update license header (#5540)

2025-10-10 15:32:46 +02:00

reports

Allow more decimal places for tax rates (#6092)

2026-07-15 16:20:45 +02:00

returnurl

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

sendmail

repair sendmail rules so we don't send emails to all positions in order independent of checkin status (Z#23235255) (#6340)

2026-07-07 17:46:52 +02:00

statistics

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

stripe

Remove more usages of |safe (#6363)

2026-07-16 13:14:37 +02:00

ticketoutputpdf

Hotfix: fix order_position_buttons receiver

2026-07-10 15:08:10 +02:00

webcheckin

Improve handling of logout during asynchronous tasks (Z#23238978) (#6341)

2026-07-07 16:14:00 +02:00

__init__.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00