Thursday, February 27, 2025
1 change
Security fixes and vulnerability patches
IoT communications now include a security signature on selected protected requests, helping confirm that messages have not been altered or forged. This improves trust and safety for IoT long-polling interactions without changing the everyday user workflow.
Original PR description
We implemented a signature check on routes we want to protect: we now sign requests' urls and payloads for these routes using a hmac time-based signature. Those routes are decorated by `@route.protect`. Community PR: [https://github.com/odoo/odoo/pull/178919](https://github.com/odoo/odoo/pull/178919) Task: 3082226