Files
odoo_source/addons/website_event_crm/__init__.py
T
Nasreddin Boulif (bon) 5b71700434 [FIX] website_event_crm: escape HTML tags in lead description
Steps to reproduce:

  - Install `website_event_crm` module
  - Go to events and create a new event
  - Add a question of type `text input`
  - Publish the event and go to it on the website
  - Register to the event with an email containing `@example.com` and
    answer the question.
  - Go to CRM in backend and open the new lead created.

Issue:

  Html tags are not escaped in the lead description.
  Same issue with `text_box` type question when having html in answer.

Cause:

  The override of `_get_lead_description_registration` is returning
  a string that escape also the `</br>` tags + the `text_box` answer
  is not escaped.

Solution:

  Use Markup around strings that contain the `</br>` tags to be not
  escaped + escape `text_box` answers.

opw-3471097

closes odoo/odoo#146937

X-original-commit: 27faa1f9b28d01e13277d8d16d7dfbbab8701b01
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>
2023-12-21 07:59:57 +00:00

6 lines
141 B
Python

# -*- coding: utf-8 -*-
# Part of Odoo. See LICENSE file for full copyright and licensing details.
from . import models
from . import tests