diff options
| author | Aaron Bohy <aab@odoo.com> | 2015-12-09 10:37:24 +0100 |
|---|---|---|
| committer | Aaron Bohy <aab@odoo.com> | 2015-12-09 11:16:24 +0100 |
| commit | 6cf8ebab3d549e9ea28d662d1caf6cb2ccb1db82 (patch) | |
| tree | 396920c75399bee558ca89451482a2c85812383d /addons/mail/static/src/xml/thread.xml | |
| parent | 085f6e0e6872cbfe2e4ee2c8db92bef0f1f23b8c (diff) | |
[FIX] mail: escape user and channel names to prevent xss
However, users shouldn't be allowed to have xss in their name, imo.
Diffstat (limited to 'addons/mail/static/src/xml/thread.xml')
0 files changed, 0 insertions, 0 deletions