odoo/addons/website/models
Nicolas Lempereur 8c77c711ee [FIX] website: escaping saved html content
Escape text nodes changed via the web editor before sending the content
it to the server controller.

It is done since the content is unescaped one time when being displayed,
and it is not done for inline style and script tags (which may be
injected by dropping a snippet) since that would break them.

replacing the solution in cdb900044.
2015-08-27 17:27:39 +02:00
..
__init__.py [IMP] mail,website: improve update_notification 2014-09-15 18:53:22 +02:00
ir_actions.py [FIX] ir_actions in website: allow to compute website_path even when creating a new server action (avoid crash then) 2014-08-08 11:43:28 +02:00
ir_http.py [FIX] account, mail, etc.: uniformize evaluated expressions 2015-05-21 15:26:35 +02:00
ir_qweb.py [FIX] website, website_sale: alternative for images 2015-08-27 15:46:14 +02:00
ir_ui_view.py [FIX] website: escaping saved html content 2015-08-27 17:27:39 +02:00
res_config.py [FIX] website: can not change website name 2014-12-01 16:50:51 +01:00
test_models.py [IMP] website: disable translation exports for test models 2014-07-30 13:24:39 +02:00
update.py [IMP] mail,website: improve update_notification 2014-09-15 18:53:22 +02:00
website.py [FIX] website: json are not multilang by default. 2015-04-08 18:31:43 +02:00