Olivier Dony 1d25fe1e05 [FIX] qweb: escape alt-field properly in image widget ...

This is very unlikely to be exploitable because the
alt-field usually comes from master data (e.g. product
names) that can't be injected.

Courtesy of Naglis Jonaitis

2016-04-15 09:51:19 +02:00

..

__init__.py

[IMP] mail,website: improve update_notification

2014-09-15 18:53:22 +02:00

ir_actions.py

[FIX] ir_actions in website: allow to compute website_path even when creating a new server action (avoid crash then)

2014-08-08 11:43:28 +02:00

ir_http.py

[FIX] website: prefer to get exact language

2016-04-06 15:31:58 +02:00

ir_qweb.py

[FIX] qweb: escape alt-field properly in image widget

2016-04-15 09:51:19 +02:00

ir_ui_view.py

[FIX] website,ir_qweb: prevent inherit_branding for assets

2015-11-23 17:01:03 +01:00

res_config.py

[FIX] website: can not change website name

2014-12-01 16:50:51 +01:00

test_models.py

…

update.py

[IMP] mail,website: improve update_notification

2014-09-15 18:53:22 +02:00

website.py

[FIX] website: alternate languages translated URL

2016-03-01 10:53:44 +01:00