Daily updates from Odoo
Friday, April 19, 2024
1 change · 17.0
Security fixes and vulnerability patches
This update fixes a security vulnerability in the Italian EDI withholding module by properly escaping user and external system input in HTML content. Without proper escaping, malicious code could potentially be injected into error messages and other displayed content. This change ensures compliance with security standards and protects your system from potential attacks.
Original PR description
Every string we use in HTML that holds user or external system input has to be escaped for compliance.