From 20ea65f9f682b3d23363dc7ba40eb6b060cbea4e Mon Sep 17 00:00:00 2001
From: Fabien Meghazi <fme@openerp.com>
Date: Thu, 14 Aug 2014 17:27:50 +0200
Subject: [PATCH] [IMP] bundles: display warning for forbidden local @imports

---
 openerp/addons/base/ir/ir_qweb.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/openerp/addons/base/ir/ir_qweb.py b/openerp/addons/base/ir/ir_qweb.py
index 48782a9fba2..118d98cbc0f 100644
--- a/openerp/addons/base/ir/ir_qweb.py
+++ b/openerp/addons/base/ir/ir_qweb.py
@@ -1195,6 +1195,9 @@ class AssetsBundle(object):
             if '.' not in ref and line not in imports and not ref.startswith(('.', '/', '~')):
                 imports.append(line)
                 return line
+            msg = "Local import '%s' is forbidden for security reasons." % ref
+            _logger.warning(msg)
+            self.css_errors.append(msg)
             return ''
         source = re.sub(self.rx_preprocess_imports, sanitize, source)