summaryrefslogtreecommitdiff
path: root/addons/analytic_user_function/analytic_user_function_view.xml
diff options
context:
space:
mode:
authorOlivier Dony <odo@openerp.com>2015-03-07 01:36:18 +0100
committerOlivier Dony <odo@openerp.com>2015-03-09 14:41:14 +0100
commit13476c844d7065d8036422ac49dbcf772b2a6208 (patch)
tree764da17a31c6c2342fc72d16b89826f55ab790c0 /addons/analytic_user_function/analytic_user_function_view.xml
parent948befbb34693f20ea971775fbebb8e1084c99d2 (diff)
[FIX] fields.html, forum: opt-in stripping of @style attrs
For public-facing HTML content provided by the user, `<style>` tags and `style` attributes should be stripped automatically, as they can easily be abused to deface pages for abusive users and spammers. <style> tags were already stripped, the optional `strip_style` for fields.html enables the automatic stripping of style attributes. This is opt-in because custom style attributes are still desirable in trusted HTML fields.
Diffstat (limited to 'addons/analytic_user_function/analytic_user_function_view.xml')
0 files changed, 0 insertions, 0 deletions