diff options
| author | Nicolas Lempereur <nle@odoo.com> | 2015-08-18 08:42:41 +0200 |
|---|---|---|
| committer | Nicolas Lempereur <nle@odoo.com> | 2015-08-27 17:27:39 +0200 |
| commit | 8c77c711eeaa2aea34094574e1046e43a049cb9e (patch) | |
| tree | 2cdc32e7b48f5b42c2a7c7a048b4d64b7d78c100 /addons/analytic_user_function/security | |
| parent | 96be5b404a75f5455ca6b84302decb157ac8e1ef (diff) | |
[FIX] website: escaping saved html content
Escape text nodes changed via the web editor before sending the content
it to the server controller.
It is done since the content is unescaped one time when being displayed,
and it is not done for inline style and script tags (which may be
injected by dropping a snippet) since that would break them.
replacing the solution in cdb900044.
Diffstat (limited to 'addons/analytic_user_function/security')
0 files changed, 0 insertions, 0 deletions