diff options
| author | Olivier Dony <odo@openerp.com> | 2016-04-14 10:55:37 +0200 |
|---|---|---|
| committer | Olivier Dony <odo@openerp.com> | 2016-04-15 09:51:19 +0200 |
| commit | 1d25fe1e05d61c9b6be5d3bd25a65e5b8c4696b7 (patch) | |
| tree | 2867df115a0a40a9f01ddf17db85ad91d6aac4b2 /addons/web/static/src/js/framework | |
| parent | dc3f1e22117aafbc1342a2ea1a8902072edaeb4e (diff) | |
[FIX] qweb: escape alt-field properly in image widget
This is very unlikely to be exploitable because the
alt-field usually comes from master data (e.g. product
names) that can't be injected.
Courtesy of Naglis Jonaitis
Diffstat (limited to 'addons/web/static/src/js/framework')
0 files changed, 0 insertions, 0 deletions