diff options
| author | Xavier Morel <xmo@odoo.com> | 2015-11-25 09:40:34 +0100 |
|---|---|---|
| committer | Christophe Simonis <chs@odoo.com> | 2015-11-30 16:39:13 +0100 |
| commit | 2afb5b43ef0c7aa69b63145052a8d183d3d9d14b (patch) | |
| tree | 106228e7191b04819576cf070b450d27d7bc2f61 /addons/web/static/src/js/framework | |
| parent | 2769029eefd9456259c664ea846156fc9bd26a91 (diff) | |
[IMP] form builder fields blacklisting
* blacklist all fields by default
* don't use blacklist in get_authorized_fields which is called to see if
a field can be added to a form, instead only use it afterwards to see
if the field can be written to by the formbuilder. That way
formbuilder can whitelist fields which are actually added to forms
on-demand resulting in a more secure interaction
Diffstat (limited to 'addons/web/static/src/js/framework')
0 files changed, 0 insertions, 0 deletions