diff options
| author | Pragya ladda <pla@odoo.com> | 2018-08-23 17:57:09 +0530 |
|---|---|---|
| committer | Raphael Collet <rco@odoo.com> | 2018-08-24 17:08:22 +0200 |
| commit | 00ffef800ab2517259541a981407d4d9d93004cb (patch) | |
| tree | 5121c121d7281eaec0dddedb5dcafac0248eb5b2 /addons/project/controllers | |
| parent | bda6d60b8e68415938cdad2eba339be0788c30f3 (diff) | |
[FIX] project: fix sql injection in rating public controller
Diffstat (limited to 'addons/project/controllers')
| -rw-r--r-- | addons/project/controllers/rating.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/project/controllers/rating.py b/addons/project/controllers/rating.py index 3343674c0e8..4e800fbafb3 100644 --- a/addons/project/controllers/rating.py +++ b/addons/project/controllers/rating.py @@ -39,7 +39,7 @@ class RatingProject(http.Controller): AND rating IN (1,5,10) GROUP BY rated_partner_id, rating, period - """ % (project_id)) + """, (project_id, )) raw_data = request.env.cr.dictfetchall() |