[IMP] web: remote t-raw from HiddenInputFile

t-call bodies (`0`) should always be markup-safe.
2021-07-20 05:37:42 +00:00
parent 7e1827a011
commit 7689bf27c7
1 changed files with 1 additions and 1 deletions
@@ -1475,7 +1475,7 @@
            <input type="hidden" name="callback" t-att-value="fileupload_id"/>
            <input type="file" class="o_input_file" name="ufile"
                t-att="{'multiple': multi_upload ? 'multiple' : null, 'accept': widget.accepted_file_extensions || '*'}"/>
-            <t t-raw="0"/>
+            <t t-out="0"/>
        </form>
        <iframe t-att-id="fileupload_id" t-att-name="fileupload_id" style="display: none"/>
    </div>