Daily updates from Odoo
Navigate
Branch
Saturday, September 23, 2023
3 changes
Security fixes and vulnerability patches
Subscription-related payment flows now take transaction details directly from the linked business document instead of accepting them from the payment page request. This reduces the risk of incorrect or unexpected payment data and makes payment handling for sales orders, invoices, and subscriptions more reliable.
Original PR description
This commit changes the way transactions linked to a document (sales order, invoice...) are created in a payment flow. Rather than receiving and trusting the transaction values from the controller, they are now read from the linked document, and the payment flow is rerouted to use the document's module's controllers instead of that of `payment`. This ensures that no unexpected value can be passed to the `create` method of a transaction, and simplifies the implementation of the payment flows of linked documents. task-3136240 See also: - https://github.com/odoo/odoo/pull/126425 - https://github.com/odoo/upgrade/pull/5124
Code cleanup and technical improvements
This update streamlines internal test code for several Odoo apps by simplifying how text checks are written. It does not change user-facing behavior, but helps keep automated tests easier to maintain and less error-prone over time.
Original PR description
\* = approvals, documents, documents_spreadsheet, timesheet_grid, whatsapp https://github.com/odoo/odoo/pull/136295
Miscellaneous changes
Forward-Port-Of: odoo/enterprise#45333
Original PR description
Forward-Port-Of: odoo/enterprise#45333