diff options
| author | Sébastien Theys <seb@odoo.com> | 2019-08-29 12:29:32 +0000 |
|---|---|---|
| committer | Christophe Simonis <chs@odoo.com> | 2019-09-02 19:15:46 +0000 |
| commit | 3a52b22b503f5a9b42be779a0a92ecd39721363b (patch) | |
| tree | 196beedfd8c28dcbffae80c23dd47a0c07ae333c /addons/web/models | |
| parent | 5f7648bb9a3baaf21230051c19113dbfb8e6966d (diff) | |
[FIX] web: correctly escape image name
Follow up of https://github.com/odoo/odoo/commit/2f932e3a46c6005870e4130b3c3f7151cd521f2d#r34760948
`url_quote` does not escape `/` which leads to incorrect routes when the name
contains `/`.
Also escape `\` to avoid potential issues on different OS.
closes odoo/odoo#36146
Signed-off-by: Christophe Simonis <chs@odoo.com>
Diffstat (limited to 'addons/web/models')
| -rw-r--r-- | addons/web/models/ir_qweb.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/addons/web/models/ir_qweb.py b/addons/web/models/ir_qweb.py index d1d792e8f54..efb011606a3 100644 --- a/addons/web/models/ir_qweb.py +++ b/addons/web/models/ir_qweb.py @@ -53,6 +53,7 @@ class Image(models.AbstractModel): filename = options['filename'] else: filename = record.display_name + filename = filename.replace('/', '-').replace('\\', '-') src = '/web/image/%s/%s/%s%s/%s?unique=%s%s' % (record._name, record.id, options.get('preview_image', field_name), max_size, url_quote(filename), sha, avoid_if_small) |