luelistaandGitHub bf066909a7 Remove more usages of |safe (#6363) ...

* Replace |safe with |escapejson where appropriate
* Use JSON encoding for data-replace-with-qr

2026-07-16 13:14:37 +02:00

..

formats

Stop using ordinal numbers in English date represenation (Z#23210534) (#5539)

2025-10-15 09:06:54 +02:00

metrics

Update license header (#5540)

2025-10-10 15:32:46 +02:00

migrations

Migrate from AutoField to BigAutoField (#3493)

2023-09-27 08:59:10 +02:00

profile

Update license header (#5540)

2025-10-10 15:32:46 +02:00

templatetags

[SECURITY] Fix reflected XSS in redirection page (CVE-2026-57533)

2026-06-25 16:46:13 +02:00

__init__.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

apps.py

[SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535)

2026-06-25 16:46:13 +02:00

cache.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

celery.py

Add prioritization to webhook/notifications queue (#5513)

2025-12-02 09:13:01 +01:00

compat.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

config.py

Add Docker secrets support in config (#6250)

2026-07-06 15:09:31 +02:00

cookies.py

Fix customer views using wrong csrf middleware (#6027)

2026-07-10 13:25:40 +02:00

countries.py

Fix custom pycountry_add index handling (#5869)

2026-02-02 09:41:32 +01:00

database.py

Quotas: Add bulk-edit, bulk-delete and filter form (#6080)

2026-05-04 12:44:22 +02:00

daterange.py

Stop using ordinal numbers in English date represenation (Z#23210534) (#5539)

2025-10-15 09:06:54 +02:00

dicts.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

escapejson.py

Remove more usages of |safe (#6363)

2026-07-16 13:14:37 +02:00

filenames.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

format.py

SafeFormatter: Ignore conversion spec

2026-02-13 12:35:49 +01:00

hierarkey.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

http.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

i18n.py

Translation status: Properly account for plurals

2026-01-07 09:20:37 +01:00

images.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

iter.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

json.py

Allow admins to inspect invoices (#5641)

2025-11-19 14:42:18 +01:00

jsonlogic_boolalg.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

jsonlogic_query.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

jsonlogic.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

logs.py

Add trace IDs from request to celery task (#6333)

2026-07-07 12:09:27 +02:00

models.py

Allow more decimal places for tax rates (#6092)

2026-07-15 16:20:45 +02:00

money.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

monkeypatching.py

SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468) (#6260)

2026-06-26 16:45:20 +02:00

names.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

payment.py

Bank transfer: Fix incorrect HTML escaping in QR Code (fix #4780) (#6201)

2026-07-06 12:52:29 +02:00

periodic.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

permission_migration.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

reportlab.py

[SECURITY] Properly escape HTML tags in PDF generation (CVE-2026-57535)

2026-06-25 16:46:13 +02:00

safe_openpyxl.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

safedownload.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

security.py

Improve admin-facing email templates (#6216)

2026-07-06 17:25:52 +02:00

template_loaders.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

thumb.py

Thumbnails: Perform color space transform before resizing (Z#23232101) (#6120)

2026-04-28 15:35:27 +02:00

u2f.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

urls.py

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00