Romain Derie
44ae3f38da
The previous commit allows the sanitizer to be bypassed by some users if those users are part of one of the `base.group_sanitize_override` group and if the HTML field is declared as `sanitize_overridable`. This commit flag frontend HTML fields as `sanitize_overridable`. See the main commit of this PR for more details. It also gives the `base.group_sanitize_override` group to the "Editor & Designer" group. Part-of: odoo/odoo#97398
24 lines
864 B
Python
24 lines
864 B
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo import api, models, fields
|
|
from odoo.addons.http_routing.models.ir_http import slug
|
|
from odoo.tools.translate import html_translate
|
|
|
|
|
|
class ImLivechatChannel(models.Model):
|
|
|
|
_name = 'im_livechat.channel'
|
|
_inherit = ['im_livechat.channel', 'website.published.mixin']
|
|
|
|
def _compute_website_url(self):
|
|
super(ImLivechatChannel, self)._compute_website_url()
|
|
for channel in self:
|
|
channel.website_url = "/livechat/channel/%s" % (slug(channel),)
|
|
|
|
website_description = fields.Html(
|
|
"Website description", default=False, translate=html_translate,
|
|
sanitize_overridable=True,
|
|
sanitize_attributes=False, sanitize_form=False,
|
|
help="Description of the channel displayed on the website page")
|