diff options
| author | Martin Trigaux <mat@odoo.com> | 2016-01-08 08:59:30 +0100 |
|---|---|---|
| committer | Martin Trigaux <mat@odoo.com> | 2016-01-08 10:07:38 +0100 |
| commit | 44e65e72d3a362dedf2e7084ae193b5d8d4be3ad (patch) | |
| tree | a1539c66dc16a994e324ab78187c10c4eb98f647 /addons/web/static/lib/jquery.mjs.nestedSortable | |
| parent | ef6116bfb54986c102554964d8ec01a4f617a1c2 (diff) | |
[FIX] mail: ignore abritrary argument domain for searching channel
We should not trust arbitrary arguments from public method to compose a domain
as it is possible to inject '|' to disable filters and be able to search any
channel (mitigated by access rules).
Create a private method and use a wrapper that ignores the domain.
Diffstat (limited to 'addons/web/static/lib/jquery.mjs.nestedSortable')
0 files changed, 0 insertions, 0 deletions