Thibault Delavallée
02c748be59
Now having * sanitize: run the sanitizer to clean the html (removing javascripts, unwanted tags, ...) * sanitize_tags: only a subset of tags is allowed in html content. Unwelcomed tags are remove dand their content stripped. * sanitize_attributes: only a subset of attributes is allowed. * sanitize_style: only a subset of style attributes is allowed. Style attributes are parsed to keep only a white list. * strip_style: all style is removed. It bypasses sanitize_style as there is no need to sanitize something that is removed. * strip_classes: remove class attributes Fields parameters have also been updated to match the sanitize options. Html fields by default are sanitized with sanitize_tags activated but without any further options. All addons have been updated to match the new options according to their previous behavior.
21 lines
793 B
Python
21 lines
793 B
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo import api, models, fields
|
|
from odoo.addons.website.models.website import slug
|
|
from odoo.tools.translate import html_translate
|
|
|
|
|
|
class ImLivechatChannel(models.Model):
|
|
|
|
_name = 'im_livechat.channel'
|
|
_inherit = ['im_livechat.channel', 'website.published.mixin']
|
|
|
|
@api.multi
|
|
def _compute_website_url(self):
|
|
super(ImLivechatChannel, self)._compute_website_url()
|
|
for channel in self:
|
|
channel.website_url = "/livechat/channel/%s" % (slug(channel),)
|
|
|
|
website_description = fields.Html("Website description", default=False, help="Description of the channel displayed on the website page", sanitize_attributes=False, translate=html_translate)
|