From c372708b01b9c1a19137b25eeddf6ec7ab2c2480 Mon Sep 17 00:00:00 2001 From: Olivier Dony Date: Thu, 28 Jul 2016 17:27:46 +0200 Subject: [PATCH] [FIX] website_google_map: do not allow invalid partner prefix The only supported prefixes are the following: - /partners/ when website_partner and/or website_crm_partner_assign are installed - /customers/ when website_customer is installed --- addons/website_google_map/controllers/main.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/addons/website_google_map/controllers/main.py b/addons/website_google_map/controllers/main.py index 1abc7c41397..282be8e508f 100644 --- a/addons/website_google_map/controllers/main.py +++ b/addons/website_google_map/controllers/main.py @@ -57,9 +57,14 @@ class google_map(http.Controller): 'longitude': escape(str(partner.partner_longitude)), }) + if 'customers' in post.get('partner_url', ''): + partner_url = '/customers/' + else: + partner_url = '/partners/' + # generate the map values = { - 'partner_url': post.get('partner_url'), + 'partner_url': partner_url, 'partner_data': json.dumps(partner_data) } return request.website.render("website_google_map.google_map", values)