diff options
| author | qsm-odoo <qsm@odoo.com> | 2019-09-30 16:24:06 +0000 |
|---|---|---|
| committer | qsm-odoo <qsm@odoo.com> | 2019-10-01 15:33:28 +0000 |
| commit | 6991f300cd0fb35564e1249e4b407463162c689e (patch) | |
| tree | 4383fe1aa3c5b3f240e7af9c498b68fb9dcb9c94 /addons/account/static | |
| parent | 28931034c013f65ca1da3f14b639430b4ff399ec (diff) | |
[FIX] web, *: review Bootstrap tooltip/popover sanitization
* website_sale_comparison
The Bootstrap sanitization introduced with BS 4.3.1 was disabled with
https://github.com/odoo/odoo/commit/36caf5fc16b5a95a0bf37f08f0caf974683b2df6
https://github.com/odoo/odoo/commit/ee94decd30c4514d5bc410b1652bc6464bb600aa
This commit re-enables it by default but extends it to accept more
common tag names like tables and buttons. If a specific tooltip or
popover must accept custom tags or attributes (such as data-* attributes
required by a related JS), they must be supplied through the whitelist
BS parameter explicitely (see example with website_sale_comparison in
this commit).
Note: data-oe-* attributes are also whiteListed by default.
We cannot disable sanitization because bootstrap uses tooltip/popover
DOM attributes in an "unsafe" way.
closes odoo/odoo#37631
Signed-off-by: Olivier Dony (odo) <odo@openerp.com>
Diffstat (limited to 'addons/account/static')
0 files changed, 0 insertions, 0 deletions