diff options
| author | Jérome Maes <jem@openerp.com> | 2016-11-15 12:04:05 +0100 |
|---|---|---|
| committer | Jérome Maes <jem@openerp.com> | 2016-11-16 16:12:52 +0100 |
| commit | 8cac9d664c3d34f59c1682f06c9b177d2a1fe239 (patch) | |
| tree | 0498af82b3a0ac6c637048155b4b36fd6a239355 /addons/im_livechat/controllers | |
| parent | 87184d0894fdb7444cc0d4b6e7028f1f97a7c4f7 (diff) | |
[FIX] im_livechat: stop using unsecure controller
Loading history can contains sensitive informations.
You can load the history of a public conversation if
you have its uuid.
This commit stops using unsecure controller when a
secure one for this case exists !
Diffstat (limited to 'addons/im_livechat/controllers')
| -rw-r--r-- | addons/im_livechat/controllers/main.py | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/addons/im_livechat/controllers/main.py b/addons/im_livechat/controllers/main.py index a58ff22ecc7..a60ecd26ff7 100644 --- a/addons/im_livechat/controllers/main.py +++ b/addons/im_livechat/controllers/main.py @@ -77,10 +77,6 @@ class LivechatController(http.Controller): anonymous_name = request.env.user.name return request.env["im_livechat.channel"].get_mail_channel(channel_id, anonymous_name) - @http.route('/im_livechat/history', type="json", auth="public") - def history(self, channel_id, limit): - return request.env["mail.channel"].browse(channel_id).channel_fetch_message(limit=limit) - @http.route('/im_livechat/feedback', type='json', auth='public') def feedback(self, uuid, rate, reason=None, **kwargs): Channel = request.env['mail.channel'] |