Tuesday, August 27, 2024
1 change · saas-17.4
Enhancements to existing features
Odoo now standardizes cookie data before applications use it, reducing issues when cookie formats change between versions. This helps users keep working smoothly with existing sessions while simplifying behavior across website, chat, mail, events, surveys, and authentication flows.
Original PR description
Changing the format of a data stored inside a cookie makes is dangerous as there always is a possibility that someone has a valid session with that cookie but with the previous format. Ideally in all places where we use that cookie, we should test for all formats. In this work we propose a more definitive solution to this problem. Whenever one is going to use `request.cookies` we run code to sanitize the existing cookies to converge all possible data format to a single one. This way the applications can not bother about what format their data is and always process a single unified format.