Thursday, June 4, 2020
1 change · master
Security fixes and vulnerability patches
This change restores a website utility that lets pages submit actions securely from JavaScript. It updates content creation, blog tag filtering, and shopping cart changes to use protected POST requests, reducing the risk of unwanted cart changes or unsafe links.
Original PR description
It was deleted in 11.0 as it was not used anymore. Now, it is reintroduce as it is a nice utility function for some external app or fixes. Here, it is use so that /website/add and /website/add/<path> work as a controller POST with a CSRF token. task-2241766 -- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr