Julien Castiaux 05fd991389 [FIX] link_tracker: prevent links from linking themselves ...

It was technically possible to register a link that would loop on itself
by abusing the query and fragment parts of the URL. It was possible to
register a link targetting `#` and get the following HTTP exchange which
enter an infinite loop.

	GET /r/bAd HTTP/1.0

	HTTP/1.0 301 Redirect
	Location: #

	GET /r/bAd# HTTP/1.0

Prevent such links from being registered and highlight flaws inside the
`validate_url` method with unittests.

Part-of: odoo/odoo#150678

2024-01-24 10:44:40 +00:00

..

addons

[FIX] link_tracker: prevent links from linking themselves

2024-01-24 10:44:40 +00:00

cli

[IMP] *: use correct indentation in manifest summary

2023-10-11 08:18:49 +00:00

conf

…

modules

[FIX] core: KeyError odoo.fields in compute_value

2023-12-15 21:02:10 +00:00

osv

[FIX] base: raise ValueError when user enters wrong path

2023-11-08 12:14:50 +00:00

service

[FIX] core: avoid 'Registry' object has no attribute '_m2m' error

2023-12-15 21:02:10 +00:00

tests

[FIX] core: avoid hiding access error in onchange() with Form

2024-01-11 17:00:50 +00:00

tools

[FIX] core: fix import error after translate override

2024-01-10 06:12:25 +00:00

upgrade

…

__init__.py

[FIX] mail: support hebrew charset iso-8859-8-i

2024-01-23 16:01:43 +00:00

__main__.py

…

api.py

[FIX] core: modified() for context-dependent non-stored recursive fields

2023-11-25 06:43:38 +00:00

exceptions.py

…

fields.py

[FIX] core: fix Field._update() method to take in account archived record

2024-01-10 08:51:01 +00:00

http.py

[FIX] http: close request resources when done

2024-01-23 04:41:40 +00:00

import_xml.rng

[IMP] convert: autofill sequence fields

2023-10-06 13:08:51 +00:00

loglevels.py

…

models.py

[FIX] core: include inactive companies in _check_company

2024-01-08 20:38:03 +00:00

netsvc.py

…

release.py

[REL] 17.0

2023-10-26 19:39:28 +00:00

sql_db.py

[FIX] *: restore gettext and unlink lints

2023-10-26 13:41:19 +00:00