diff options
| author | Thibault Delavallée <tde@openerp.com> | 2016-08-19 13:49:48 +0200 |
|---|---|---|
| committer | Thibault Delavallée <tde@openerp.com> | 2016-08-30 15:54:56 +0200 |
| commit | 02c748be59ac8abc44c945218587e7b8a8e06a28 (patch) | |
| tree | 1e68f807714a08b850c66b8d9c9b02e47fdc3a5b /addons/website_mass_mailing/models | |
| parent | 97425bfe3f2b317595e7086aedf7b5689dc9d218 (diff) | |
[IMP] tools: sanitizer: add and clean sanitize options
Now having
* sanitize: run the sanitizer to clean the html (removing javascripts,
unwanted tags, ...)
* sanitize_tags: only a subset of tags is allowed in html content.
Unwelcomed tags are remove dand their content stripped.
* sanitize_attributes: only a subset of attributes is allowed.
* sanitize_style: only a subset of style attributes is allowed. Style
attributes are parsed to keep only a white list.
* strip_style: all style is removed. It bypasses sanitize_style as there
is no need to sanitize something that is removed.
* strip_classes: remove class attributes
Fields parameters have also been updated to match the sanitize options. Html
fields by default are sanitized with sanitize_tags activated but without any
further options. All addons have been updated to match the new options
according to their previous behavior.
Diffstat (limited to 'addons/website_mass_mailing/models')
| -rw-r--r-- | addons/website_mass_mailing/models/mass_mailing_list.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/website_mass_mailing/models/mass_mailing_list.py b/addons/website_mass_mailing/models/mass_mailing_list.py index 7058e385b05..3e49bcba59b 100644 --- a/addons/website_mass_mailing/models/mass_mailing_list.py +++ b/addons/website_mass_mailing/models/mass_mailing_list.py @@ -18,6 +18,6 @@ class MassMailingList(models.Model): </div> <p class="o_message_paragraph">Join our Marketing newsletter and get <strong>this white paper instantly</strong></p>""" - popup_content = fields.Html(string="Website Popup Content", translate=True, sanitize=False, + popup_content = fields.Html(string="Website Popup Content", translate=True, sanitize_attributes=False, default=_default_popup_content) popup_redirect_url = fields.Char(string="Website Popup Redirect URL", default='/') |