Martin Trigaux ad54273e9c [FIX] mail: sanitize activity notes ...

The note content was not sanitized against HTML content.
This is not considered as a security issue as an activity can only be
created by trusted employees, however there is no reason not to
sanitize it.

Courtesy of Lauri Vakkala, silverskin

closes odoo/odoo#48889

X-original-commit: 970b460295c3d33dbb089ef6b7224b472e6b568d
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>

2020-04-02 13:49:26 +00:00

..

__init__.py

[MOV] mail: split alias model from its mixin

2020-03-30 12:50:26 +00:00

ir_action_act_window.py

[FIX] *: set ondelete policy of required Selection fields

2020-03-30 13:42:04 +00:00

ir_actions.py

[FIX] *: set ondelete policy of required Selection fields

2020-03-30 13:42:04 +00:00

ir_attachment.py

[FIX] mail: don't raise access error on register_as_main_attachment

2020-02-14 10:15:12 +00:00

ir_autovacuum.py

…

ir_config_parameter.py

[IMP] mail: prevent from re-using aliases

2020-03-30 12:50:26 +00:00

ir_http.py

[IMP] mail, test_mail, hr_holidays: remove obsolete out of office

2020-02-10 13:05:04 +00:00

ir_model_fields.py

[IMP] mail: track fields based on ir_model_fields

2019-11-19 07:50:34 +00:00

ir_model.py

…

ir_ui_view.py

…

mail_activity.py

[FIX] mail: sanitize activity notes

2020-04-02 13:49:26 +00:00

mail_alias_mixin.py

[MOV] mail: split alias model from its mixin

2020-03-30 12:50:26 +00:00

mail_alias.py

[MOV] mail: split alias model from its mixin

2020-03-30 12:50:26 +00:00

mail_blacklist.py

[IMP] mass_mailing_(sms): Add unblacklisting button

2020-03-26 10:15:18 +00:00

mail_cc_mixin.py

[REF] mail: remove deprecated email formataddr

2019-09-17 11:32:54 +00:00

mail_channel.py

[IMP] mail: ease bounce email content update based on alias security

2020-03-12 13:54:32 +00:00

mail_followers.py

[FIX] mail: make followers computation compatible with postgresql < 10

2020-02-25 13:24:23 +00:00

mail_mail.py

[IMP] mail: improve the help tooltip of auto_delete field

2020-02-18 10:01:38 +00:00

mail_message_subtype.py

…

mail_message.py

[IMP] models, (test_)mail, portal(_rating): remove message_tree

2020-03-06 16:15:44 +00:00

mail_notification.py

…

mail_render_mixin.py

[MOV] mail, various: move replace_local_links to render mixin

2020-03-24 10:24:44 +00:00

mail_shortcode.py

[FIX] mail: odoobot onboarding canned_response_ids

2019-09-04 13:03:20 +00:00

mail_template.py

[MOV] mail, various: move replace_local_links to render mixin

2020-03-24 10:24:44 +00:00

mail_thread.py

[REM] *: remove various unused import shims

2020-04-01 12:45:40 +00:00

mail_tracking_value.py

[IMP] mail: track fields based on ir_model_fields

2019-11-19 07:50:34 +00:00

models.py

…

res_company.py

[IMP] mail: add computed fields for company emails

2019-11-29 13:35:14 +00:00

res_config_settings.py

…

res_partner.py

[REF] base, mail: improve partner creation from name / email

2020-03-24 10:24:14 +00:00

res_users.py

[IMP] fields: log warning for ignored selection

2020-02-20 14:58:33 +00:00

update.py

[REF] mail, various: rename subtype parameter of message_post to subtype_xmlid

2019-12-02 15:18:44 +00:00