From 4b289bfd3f08ca27b221341bb778e39c1b907402 Mon Sep 17 00:00:00 2001
From: Aaron Bohy <aab@odoo.com>
Date: Wed, 29 Apr 2020 12:46:18 +0000
Subject: [PATCH] [FIX] web: list: fix confirmModal template

Replaces unnecessary (harmless in this case, but still), 't-raw'
by 't-esc'. Also replace a t-raw used in the SwitchCompanyMenu
(unnecessary and harmless as well).

closes odoo/odoo#50411

X-original-commit: 691c9d2d2868885124749482aa8954322a40f130
Signed-off-by: Lucas Perais (lpe) <lpe@odoo.com>
Signed-off-by: Aaron Bohy (aab) <aab@odoo.com>
---
 addons/web/static/src/xml/base.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/addons/web/static/src/xml/base.xml b/addons/web/static/src/xml/base.xml
index 0199aeb8136..10d52e55d28 100644
--- a/addons/web/static/src/xml/base.xml
+++ b/addons/web/static/src/xml/base.xml
@@ -910,17 +910,17 @@
         <p>
             <t t-if="changes.isDomainSelected">This update will only consider the records of the current page.<br/><br/></t>
             <t t-if="changes.nbRecords != changes.nbValidRecords">
-                Among the <t t-raw="changes.nbRecords"/> selected records,
-                <t t-raw="changes.nbValidRecords"/> are valid for this update.<br/>
+                Among the <t t-esc="changes.nbRecords"/> selected records,
+                <t t-esc="changes.nbValidRecords"/> are valid for this update.<br/>
             </t>
-            Are you sure you want to perform the following update on those <t t-raw="changes.nbValidRecords"/> records ?
+            Are you sure you want to perform the following update on those <t t-esc="changes.nbValidRecords"/> records ?
         </p>
         <div class="table-responsive">
             <table class="o_modal_changes">
                 <tbody>
                     <tr>
                         <td>Field:</td>
-                        <td><t t-raw="changes.fieldLabel"/></td>
+                        <td><t t-esc="changes.fieldLabel"/></td>
                     </tr>
                     <tr>
                         <td>Update to:</td>
@@ -1797,7 +1797,7 @@
     <li class="o_switch_company_menu">
         <a role="button" class="dropdown-toggle o-no-caret" data-toggle="dropdown" data-display="static" aria-expanded="false" href="#" title="Dropdown menu">
             <span t-attf-class="#{widget.isMobile ? 'fa fa-building-o' : 'oe_topbar_name'}">
-                <t t-if="!widget.isMobile"><t t-raw="widget.current_company_name"/></t>
+                <t t-if="!widget.isMobile"><t t-esc="widget.current_company_name"/></t>
             </span>
         </a>
         <div class="dropdown-menu dropdown-menu-right" role="menu">