Daily updates from Odoo
Thursday, September 26, 2024
1 change
Security fixes and vulnerability patches
Tour completion messages now keep their intended formatting when restored from browser storage. The change also sanitizes stored message content to reduce the risk of unsafe content being shown to users.
Original PR description
The markup was done before writing the rainbow_man_message in the localStorage. When getting it back, the markup was lost. Now the markup is done after getting it from the localStorage. And a DOMPurify is used to sanitize the rainbow_message that we got. TASK-ID: 4206377 --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr