From be35b9f5196f8eca2f9a19de4296fcdaea43d25d Mon Sep 17 00:00:00 2001
From: tsm-odoo <tsm@odoo.com>
Date: Mon, 11 Sep 2023 11:00:25 +0200
Subject: [PATCH] [FIX] im_livechat: actions on frontend messages
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This commit prevent the livechat visitor from executing actions
on frontend messages (that are not known by the server).

Steps to reproduce the issue:
- Open a livechat with an operator
- A welcome message is displayed ("How can I help you?")
- Add a reaction to this message
- A crash occurs

closes odoo/odoo#134987

Signed-off-by: Alexandre Kühn (aku) <aku@odoo.com>
---
 addons/im_livechat/static/src/embed/core_ui/thread_patch.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/addons/im_livechat/static/src/embed/core_ui/thread_patch.xml b/addons/im_livechat/static/src/embed/core_ui/thread_patch.xml
index 2bd10607011..4df84c30180 100644
--- a/addons/im_livechat/static/src/embed/core_ui/thread_patch.xml
+++ b/addons/im_livechat/static/src/embed/core_ui/thread_patch.xml
@@ -3,11 +3,11 @@
     <t t-inherit="mail.Thread" t-inherit-mode="extension">
         <xpath expr="//*[@name='content']" position="before">
             <div t-if="props.thread?.livechatWelcomeMessage" class="bg-100 py-3">
-                <Message message="props.thread.livechatWelcomeMessage" thread="props.thread"/>
+                <Message message="props.thread.livechatWelcomeMessage" hasActions="false" thread="props.thread"/>
             </div>
         </xpath>
         <xpath expr="//*[@name='content']" position="after">
-            <Message t-if="chatbotService.isTyping" message="props.thread.chatbotTypingMessage" isInChatWindow="env.inChatWindow" isTypingMessage="true"  thread="props.thread"/>
+            <Message t-if="chatbotService.isTyping" message="props.thread.chatbotTypingMessage" hasActions="false" isInChatWindow="env.inChatWindow" isTypingMessage="true"  thread="props.thread"/>
         </xpath>
         <xpath expr="//*[hasclass('o-mail-Thread-empty')]" position="replace">
             <t t-if="props.thread.type !== 'livechat'">$0</t>