Monday, September 9, 2019
1 change · master
Security fixes and vulnerability patches
This update adds a new automated quality check that detects patterns which could lead to SQL injection vulnerabilities before code is merged. It helps protect Odoo users by catching security risks earlier in the development and testing process.
Original PR description
You can see the check working from a sql-injection detected from the following runbot build: - http://runbot.odoo.com/runbot/build/379671 (Notice 🔴 result) The possible sql injection detected was: - https://github.com/odoo/odoo/blob/2cee34fea2bccf3320f0d09969e300361995d428/addons/mail/wizard/mail_compose_message.py#L265-L290 After the following fix: - https://github.com/odoo/odoo/commit/2ff9b379ef80ba6a8744fb9702a8088284372ddd Now the runbot is green. - http://runbot.odoo.com/runbot/build/380338 Odoo enterprise has a case of posible pylint check detected from tests I just fixed by request of @KangOl: - https://github.com/odoo/enterprise/pull/5349