std-odoo
2a2e5c7b1e
In portal an user can say he is interested by a lead and take it. He can also post a comment. However this comment was not escaped, leading to possible html injection. As this comment is used to post a message no real issue occurs. It is sanitized and behaves like every html content used in message_post. However we do not want to support html here and therefore escape the content given to message post. Task ID 2228921 closes odoo/odoo#50537 X-original-commit: df5345618c4abbe8766a012b08ed90f1706c919a Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
Odoo
Odoo is a suite of web based open source business apps.
The main Odoo Apps include an Open Source CRM, Website Builder, eCommerce, Warehouse Management, Project Management, Billing & Accounting, Point of Sale, Human Resources, Marketing, Manufacturing, ...
Odoo Apps can be used as stand-alone applications, but they also integrate seamlessly so you get a full-featured Open Source ERP when you install several Apps.
Getting started with Odoo
For a standard installation please follow the Setup instructions from the documentation.
To learn the software, we recommend the Odoo eLearning, or Scale-up, the business game. Developers can start with the developer tutorials