Raphael MichelandMira Weller deee2c9f66 [SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602) ...

- Add central framebreaker page via safelink helper
- Update paypal, paypal2 and stripe plugins to use central framebreaker
- Add CSP header to cookies.html

---------

Co-authored-by: Mira Weller <weller@pretix.eu>

2026-07-01 14:02:48 +02:00

..

pretix

[SECURITY] Centralize framebreaking logic from payment plugins to core (CVE-2026-13602)

2026-07-01 14:02:48 +02:00

tests

[SECURITY] Allowlisting and changed salts for safelink and safelink_callback (CVE-2026-13602)

2026-07-01 14:02:48 +02:00

.gitignore

Performance: Replace inlinestyler with css_inline; Add drf-ujson (#2123)

2021-06-13 21:20:18 +02:00

.update-locales

Make weblate script more robust

2021-11-09 16:34:57 +01:00

.watchmanconfig

Add .watchmanconfig

2024-03-31 23:14:57 +02:00

Makefile

Use "npm ci" to build pretix (#5451)

2025-09-19 14:34:30 +02:00

manage.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

setup.cfg

Update django to 5.2

2026-03-24 16:33:28 +01:00