Daily updates from Odoo
Monday, April 28, 2025
2 changes
1 change
Security fixes and vulnerability patches
Live chat reaction summaries now use an agent’s custom live chat display name when one is set, instead of showing their real user name. This prevents accidental exposure of staff identities while keeping reaction details understandable for visitors and operators.
Original PR description
Before this PR, real user name was displayed in the message reaction summary. We should use the custom live chat name if any not to leak the real name of the agent. This PR fixes this issue. Description of the issue/feature this PR addresses: Current behavior before PR: Desired behavior after PR is merged: --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr
1 change
Security fixes and vulnerability patches
Appointment bookings now check for an existing contact with the submitted email and reuse it instead of creating a duplicate. The change also protects existing contact phone numbers from being overwritten by public form submissions, reducing the risk of misdirected calls or notifications.
Original PR description
This commit reintroduces check for existing partner on form submission based on the submitted email, thus preventing creating duplicates of the same partner. Reproduce --- - i website_appointment,contacts - open appointment from as a public user - book 2 appointments with the same data - open contacts -> BUG: the partner is duplicated opw-4556231