Daily updates from Odoo
Thursday, January 30, 2025
1 change · master
Resolved issues and error corrections
Odoo Sign now adds an extra confirmation step before a signature request can be refused from an email link. This prevents automated corporate email scanners from accidentally cancelling signature requests, improving reliability for customers using tools such as Microsoft Office365.
Original PR description
Several enterprise email solutions, including Microsoft's Office365 package, include automated email scanning as a premium feature. These scanners may automatically click any number of links in received emails at time of reception, triggering (and invalidating) magic links. In Sign, this would automatically refuse any incoming signature request if the sending email address is flagged by Microsoft as "suspicious". To combat this, an intermediate screen with a form possessing a single button is added, as while the safety bot does send forms it also strips them of their parameters (including the CSRF token), invalidating them. See task-3972953 for more information about Microsoft's email scanning feature task-4016343