Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

14.0 UMT Security Patches #54

Open
wants to merge 10 commits into
base: 14.0-umt-Rel-#22
Choose a base branch
from
Open

14.0 UMT Security Patches #54

wants to merge 10 commits into from

Commits on Sep 29, 2022

  1. [FIX] payment: don't display token in error message 

    This is internal data that does not need to be shown to the user
    @AntoineVDV @bcbrakelOSI
    AntoineVDV authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    7aaa824 View commit details
    Browse the repository at this point in the history

  2. [FIX] base: prevent messing up existing registry

    @bcbrakelOSI
    Adrian Torres authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    94f7119 View commit details
    Browse the repository at this point in the history

  3. [FIX] base: correct evaluation context for report rendering 

    Fix of 57665a0 which was problematic in point_of_sale
    @mart-e @bcbrakelOSI
    mart-e authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    1f059f9 View commit details
    Browse the repository at this point in the history

  4. [FIX] mail: fixup of 8af59b9 

    task-2388659
    @seb-odoo @bcbrakelOSI
    seb-odoo authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    e2727cf View commit details
    Browse the repository at this point in the history

  5. [FIX] web: expect explicit sign up parameters 

    Using an explicit list of sign up parameters will avoid
polluting the context with unrelated values, and make
debugging easier.
    @odony @bcbrakelOSI
    odony authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    257b2c5 View commit details
    Browse the repository at this point in the history

  6. [FIX] base: filter assets 

    Partially backport the changes from 49429f9 to file_open to be
able to use it in the assetsbundle
    @JKE-be @bcbrakelOSI
    JKE-be authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    b795535 View commit details
    Browse the repository at this point in the history

  7. [IMP] avoid cycle on request

    @xmo-odoo @bcbrakelOSI
    xmo-odoo authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    a620361 View commit details
    Browse the repository at this point in the history

  8. [FIX] website: fix video loading 

    task-2376327
    @qsm-odoo @bcbrakelOSI
    qsm-odoo authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    2863284 View commit details
    Browse the repository at this point in the history

  9. [FIX] web: more reliably avoid downloads on new file 

    5195550 mitigated an issue of being
able to try and download files which don't exist yet, make the fix
more reliable by clearing out the field completely and hiding the
content if the (readonly) field has no value *or the record is not
saved yet*.

Also clean up the code:

* an old-style forward port created a duplicate fixprovement
  (a8d01cb) which seems less correct
  as it applies conditionally
* and the code is branchier than necessary, we can make it simpler by
  judiciously leveraging jquery's API

closes odoo#77756

X-original-commit: 05db9be
Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>
    @xmo-odoo @bcbrakelOSI
    xmo-odoo authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    f946d96 View commit details
    Browse the repository at this point in the history

  10. [FIX] ir_demo.py: Force admin access to load demo data 

    Only admin users should be able to load demo data, if needed.

This is only possible from the settings dashboard, and thus,
the method could be decorated.

See: c002e2e
    @tivisse @bcbrakelOSI
    tivisse authored and bcbrakelOSI committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    40f4e51 View commit details
    Browse the repository at this point in the history