diff options
| author | Olivier Dony <odo@openerp.com> | 2015-03-07 01:36:18 +0100 |
|---|---|---|
| committer | Olivier Dony <odo@openerp.com> | 2015-03-09 14:41:14 +0100 |
| commit | 13476c844d7065d8036422ac49dbcf772b2a6208 (patch) | |
| tree | 764da17a31c6c2342fc72d16b89826f55ab790c0 /addons/analytic_user_function/analytic_user_function_view.xml | |
| parent | 948befbb34693f20ea971775fbebb8e1084c99d2 (diff) | |
[FIX] fields.html, forum: opt-in stripping of @style attrs
For public-facing HTML content provided by the user,
`<style>` tags and `style` attributes should be stripped
automatically, as they can easily be abused to deface
pages for abusive users and spammers.
<style> tags were already stripped, the optional `strip_style`
for fields.html enables the automatic stripping of style
attributes.
This is opt-in because custom style attributes are still
desirable in trusted HTML fields.
Diffstat (limited to 'addons/analytic_user_function/analytic_user_function_view.xml')
0 files changed, 0 insertions, 0 deletions
