diff --git a/addons/web/models/ir_qweb.py b/addons/web/models/ir_qweb.py index 4ffab27bd5e..875899f7d57 100644 --- a/addons/web/models/ir_qweb.py +++ b/addons/web/models/ir_qweb.py @@ -52,7 +52,7 @@ class Image(models.AbstractModel): filename = options['filename'] else: filename = record.display_name - filename = filename.replace('/', '-').replace('\\', '-') + filename = filename.replace('/', '-').replace('\\', '-').replace('..', '--') src = '/web/image/%s/%s/%s%s/%s?unique=%s' % (record._name, record.id, options.get('preview_image', field_name), max_size, url_quote(filename), sha)