odoo/addons/website/models
Olivier Dony 1d25fe1e05 [FIX] qweb: escape alt-field properly in image widget
This is very unlikely to be exploitable because the
alt-field usually comes from master data (e.g. product
names) that can't be injected.

Courtesy of Naglis Jonaitis
2016-04-15 09:51:19 +02:00
..
__init__.py [IMP] mail,website: improve update_notification 2014-09-15 18:53:22 +02:00
ir_actions.py [FIX] ir_actions in website: allow to compute website_path even when creating a new server action (avoid crash then) 2014-08-08 11:43:28 +02:00
ir_http.py [FIX] website: prefer to get exact language 2016-04-06 15:31:58 +02:00
ir_qweb.py [FIX] qweb: escape alt-field properly in image widget 2016-04-15 09:51:19 +02:00
ir_ui_view.py [FIX] website,ir_qweb: prevent inherit_branding for assets 2015-11-23 17:01:03 +01:00
res_config.py [FIX] website: can not change website name 2014-12-01 16:50:51 +01:00
test_models.py [IMP] website: disable translation exports for test models 2014-07-30 13:24:39 +02:00
update.py [IMP] mail,website: improve update_notification 2014-09-15 18:53:22 +02:00
website.py [FIX] website: alternate languages translated URL 2016-03-01 10:53:44 +01:00