diff options
| author | Martin Trigaux <mat@odoo.com> | 2018-07-18 10:32:42 +0200 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2018-07-18 10:32:42 +0200 |
| commit | 4e4dd4dfa2b898c064df93199f882c3829574d44 (patch) | |
| tree | 1b278e4d4e069310499f82b2c8364a0130d870fe | |
| parent | 7501691da9a9dae832b7d6e78c6a5f57fc983b5c (diff) | |
[FIX] http: avoid corruption with domain name
Domain names may have been interpreted as a regex by mistake
| -rw-r--r-- | odoo/http.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/odoo/http.py b/odoo/http.py index 0075b1bed34..5a8f6448956 100644 --- a/odoo/http.py +++ b/odoo/http.py @@ -1523,6 +1523,7 @@ def db_filter(dbs, httprequest=None): if d == "www" and r: d = r.partition('.')[0] if odoo.tools.config['dbfilter']: + d, h = re.escape(d), re.escape(h) r = odoo.tools.config['dbfilter'].replace('%h', h).replace('%d', d) dbs = [i for i in dbs if re.match(r, i)] elif odoo.tools.config['db_name']: |