Xavier Morel e162e6f714 [FIX] test_lint, *: false negative in sql injection linter ...

The linter would miss / fail to warn on injection of *local variables*
in some cases.

Try to improve it to be stricter and more reliable, after discussion
with odo, sql which is "correctly" dynamic should use psycopg2's sql
package in order to bypass the linter (bonus: it should also properly
escape & quote identifiers).

closes odoo/odoo#53938

Related: odoo/enterprise#11718
Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>

2020-07-10 07:12:35 +00:00

..

__init__.py

…

assetsbundle.py

[IMP] base: remove redundant base64 back and forth in attachments

2020-04-08 06:03:28 +00:00

decimal_precision.py

[REM] base: precision() override on ir.qweb.field.float

2020-06-29 06:16:01 +00:00

image_mixin.py

[IMP] *: remove image_64 and clean views

2019-09-19 10:23:39 +00:00

ir_actions_report.py

[FIX] l10n_ch - Swiss QR layout cleaning

2020-07-03 13:01:15 +00:00

ir_actions.py

[IMP] base: cleanup action handlers a bit

2020-06-17 12:10:45 +00:00

ir_attachment.py

[IMP] web_editor, *: change image cropping from modal to inline widget

2020-06-05 18:11:42 +00:00

ir_autovacuum.py

[REF] ir.autovacuum: declarative garbage collector registration

2020-05-19 13:38:19 +00:00

ir_config_parameter.py

[FIX] base: ir defaults in multi company.

2019-12-17 17:13:52 +00:00

ir_cron.py

[FIX] *: correct support of multi records in methods

2020-06-19 13:27:41 +00:00

ir_default.py

[FIX] base: Allow to get default with auth=none

2020-01-08 14:09:58 +00:00

ir_demo_failure.py

…

ir_demo.py

…

ir_exports.py

…

ir_fields.py

[IMP] *: replace to new _() syntax

2020-06-18 13:03:34 +02:00

ir_filters.py

[IMP] *: replace to new _() syntax

2020-06-18 13:03:34 +02:00

ir_http.py

[IMP] base: ir_http - don't check the exists in ModelConvert

2020-04-27 13:49:01 +00:00

ir_logging.py

…

ir_mail_server.py

[IMP] *: replace to new _() syntax

2020-06-18 13:03:34 +02:00

ir_model.py

[FIX] test_lint, *: false negative in sql injection linter

2020-07-10 07:12:35 +00:00

ir_module.py

[IMP] *: replace to new _() syntax

2020-06-18 13:03:34 +02:00

ir_property.py

[FIX] base: use cached field_id in ir.property

2020-06-19 15:40:06 +00:00

ir_qweb_fields.py

[FIX] *: correct all or improve code translation lookup

2020-06-30 10:19:59 +00:00

ir_qweb.py

[IMP] base: remove old checks for deprecated methods

2020-07-02 15:10:56 +00:00

ir_rule.py

[IMP] base : improve messages text in access_error pop-ups

2020-06-30 13:59:23 +00:00

ir_sequence.py

[FIX] test_lint, *: false negative in sql injection linter

2020-07-10 07:12:35 +00:00

ir_translation.py

[FIX] test_lint, *: false negative in sql injection linter

2020-07-10 07:12:35 +00:00

ir_ui_menu.py

[IMP] *: use ast.literal_eval

2020-01-28 13:58:05 +00:00

ir_ui_view.py

[IMP] web: form: labels of several occurrences of a field

2020-07-02 13:57:37 +00:00

qweb.py

[IMP] models: use slots for BaseModel

2020-05-18 09:51:43 +00:00

report_layout.py

…

report_paperformat.py

…

res_bank.py

[IMP] base: allow to archive res.partner.bank

2020-05-22 07:56:53 +00:00

res_company.py

[IMP] *: do not translate logs

2020-07-02 15:12:56 +00:00

res_config.py

[IMP] base: remove old checks for deprecated methods

2020-07-02 15:10:56 +00:00

res_country.py

[FIX] base, *: ensure name_search() returns lazy name_get() result

2019-09-11 17:11:33 +00:00

res_currency.py

[IMP] base: do not use unactivated language

2019-11-19 10:36:52 +01:00

res_lang.py

[IMP] http_routing: use cached code from lang

2020-03-26 18:12:47 +00:00

res_partner.py

[IMP] *: replace to new _() syntax

2020-06-18 13:03:34 +02:00

res_users.py

[FIX] *: correct all or improve code translation lookup

2020-06-30 10:19:59 +00:00