From b7b26093288dfd09bc69bd6d476dc467cf9cc0b1 Mon Sep 17 00:00:00 2001 From: Olivier Dony Date: Fri, 1 Apr 2016 20:44:10 +0200 Subject: [PATCH] [FIX] base_import: avoid JS error in callback --- addons/base_import/controllers.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/addons/base_import/controllers.py b/addons/base_import/controllers.py index 9a49384900f..84b645f149f 100644 --- a/addons/base_import/controllers.py +++ b/addons/base_import/controllers.py @@ -1,4 +1,5 @@ # -*- coding: utf-8 -*- +import cgi import json from openerp.http import Controller, route @@ -15,4 +16,4 @@ class ImportController(Controller): }, req.context) return 'window.top.%s(%s)' % ( - jsonp, json.dumps({'result': written})) + cgi.escape(jsonp), json.dumps({'result': written}))