Raphael MichelandMira Weller c9781f012b [SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602) ...

- Add central framebreaker page via safelink helper
- Update paypal, paypal2 and stripe plugins to use central framebreaker
- Add CSP header to cookies.html

---------

Co-authored-by: Mira Weller <weller@pretix.eu>

2026-07-01 15:15:43 +02:00

..

api

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

base

[SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602)

2026-07-01 15:15:43 +02:00

control

Subevent detail: Fix incorrect ticket count (Z#23238481)

2026-06-28 17:43:22 +02:00

helpers

filter out the 404 log records from django.request (#6324)

2026-07-01 11:33:04 +02:00

icons

Product list: Show icon for seated products (#5015)

2025-05-06 11:14:28 +02:00

locale

Discover translatable strings in .ts files (Z#23238475)

2026-06-28 17:51:40 +02:00

multidomain

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

plugins

[SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602)

2026-07-01 15:15:43 +02:00

presale

[SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602)

2026-07-01 15:15:43 +02:00

static

[SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602)

2026-07-01 15:15:43 +02:00

testutils

Fix AttributeError when running tests with debug toolbar installed

2026-04-09 13:21:54 +02:00

__init__.py

Bump version to 2026.6.0.dev0

2026-05-27 18:16:01 +02:00

__main__.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

_base_settings.py

Migrate vue2 control components and widget to vue3 and vite (#5989)

2026-05-11 15:05:06 +02:00

_build_settings.py

Migrate vue2 control components and widget to vue3 and vite (#5989)

2026-05-11 15:05:06 +02:00

_build.py

Migrate vue2 control components and widget to vue3 and vite (#5989)

2026-05-11 15:05:06 +02:00

celery_app.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

sentry.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

settings.py

filter out the 404 log records from django.request (#6324)

2026-07-01 11:33:04 +02:00

urls.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

wsgi.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00