From 4e4dd4dfa2b898c064df93199f882c3829574d44 Mon Sep 17 00:00:00 2001 From: Martin Trigaux Date: Wed, 18 Jul 2018 10:32:42 +0200 Subject: [PATCH] [FIX] http: avoid corruption with domain name Domain names may have been interpreted as a regex by mistake --- odoo/http.py | 1 + 1 file changed, 1 insertion(+) diff --git a/odoo/http.py b/odoo/http.py index 0075b1bed34..5a8f6448956 100644 --- a/odoo/http.py +++ b/odoo/http.py @@ -1523,6 +1523,7 @@ def db_filter(dbs, httprequest=None): if d == "www" and r: d = r.partition('.')[0] if odoo.tools.config['dbfilter']: + d, h = re.escape(d), re.escape(h) r = odoo.tools.config['dbfilter'].replace('%h', h).replace('%d', d) dbs = [i for i in dbs if re.match(r, i)] elif odoo.tools.config['db_name']: