summaryrefslogtreecommitdiff
path: root/addons/web/controllers/main.py
diff options
context:
space:
mode:
authorChristophe Simonis <chs@odoo.com>2016-09-09 18:13:31 +0200
committerChristophe Simonis <chs@odoo.com>2016-09-09 18:13:31 +0200
commit298e2032ea3a8ef7aac3a606e2cbc420760fd4c9 (patch)
tree0832a96998574fcb45148480bf22207a9bfef439 /addons/web/controllers/main.py
parent75f60f69416625713819c810d2da33db4dc0b06c (diff)
parent9f28139297af937990a79d4a3026ba25bb9be6fe (diff)
[MERGE] forward port branch saas-12 up to 9f28139
Diffstat (limited to 'addons/web/controllers/main.py')
-rw-r--r--addons/web/controllers/main.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/web/controllers/main.py b/addons/web/controllers/main.py
index 39ac40a35c2..08042763369 100644
--- a/addons/web/controllers/main.py
+++ b/addons/web/controllers/main.py
@@ -99,7 +99,7 @@ def ensure_db(redirect='/web/database/selector'):
# If the db is taken out of a query parameter, it will be checked against
# `http.db_filter()` in order to ensure it's legit and thus avoid db
# forgering that could lead to xss attacks.
- db = request.params.get('db')
+ db = request.params.get('db') and request.params.get('db').strip()
# Ensure db is legit
if db and db not in http.db_filter([db]):