Daily updates from Odoo
Monday, August 5, 2024
1 change
Security fixes and vulnerability patches
This update adds security verification to the public document upload feature to protect against unauthorized access attempts. The change strengthens the system's defenses without requiring any module updates, though custom integrations that directly call the upload route may need adjustment.
Original PR description
This commit add a csrf verification to the public /document/upload route This is change remains stable compliant due to not modifying the template. No module update is require for this change to work. This commit will break some custom implementation that call directly to the route. Forward-Port-Of: odoo/enterprise#67515 Forward-Port-Of: odoo/enterprise#67119