summaryrefslogtreecommitdiff
path: root/addons/web/static/src/js
diff options
context:
space:
mode:
authorMartin Trigaux <mat@odoo.com>2020-11-08 09:09:21 +0100
committerMartin Trigaux <mat@odoo.com>2020-11-08 09:09:21 +0100
commit2876991646fdc8373f64f63764923001fe7746b4 (patch)
tree405cde0c5731c5431bd046a83f7a6e47a7ff03c0 /addons/web/static/src/js
parenta2388931710e1043540bbf2de131d4783af17d0b (diff)
[FIX] web: remove formating from event title
When copy-pasting text from rich text, the content may contain unwanted formating instructions. Unsure it's escaped to avoid propagating the content.
Diffstat (limited to 'addons/web/static/src/js')
-rw-r--r--addons/web/static/src/js/views/calendar/calendar_controller.js2
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/web/static/src/js/views/calendar/calendar_controller.js b/addons/web/static/src/js/views/calendar/calendar_controller.js
index af07df6312c..2bca351a9a5 100644
--- a/addons/web/static/src/js/views/calendar/calendar_controller.js
+++ b/addons/web/static/src/js/views/calendar/calendar_controller.js
@@ -391,7 +391,7 @@ var CalendarController = AbstractController.extend({
res_model: self.modelName,
res_id: id || null,
context: event.context || self.context,
- title: _t("Open: ") + event.data.title,
+ title: _t("Open: ") + _.escape(event.data.title),
on_saved: function () {
if (event.data.on_save) {
event.data.on_save();