Daily updates from Odoo
Wednesday, July 16, 2025
3 changes
2 changes
Security fixes and vulnerability patches
Websocket messages sent to IoT Boxes are now signed to confirm they come from a valid Odoo user. This strengthens trust in IoT communications and helps prevent unauthorized client messages from being accepted.
Original PR description
As websocket messages to IoT Boxes are sent from the Odoo client, we need to ensure it is sent from a valid user. We then sign using the database generated token (same as longpolling requests). Community PR: odoo/odoo#218139 Task: 4933216
Barcode line descriptions now keep their line breaks without relying on a less safe rendering method. This improves the security and reliability of barcode screens while keeping the same appearance for users.
Original PR description
This commit replaces the usage of unsafe `markup` with the CSS property: `white-space: pre-wrap` for showing the line description in barcode. Previously, `markup` was used to preserve the line breaks in the line description by replacing all `\n`s with `<br/>` which required using `markup` to render the text properly. However, the above mentioned CSS property achieves the same exact result by not ignoring the line breaks in the original string.
1 change
Security fixes and vulnerability patches
Barcode line descriptions now keep their line breaks without relying on a less safe rendering method. This preserves the same visual layout for users while reducing the risk of unsafe text handling in the barcode workflow.
Original PR description
This commit replaces the usage of unsafe `markup` with the CSS property: `white-space: pre-wrap` for showing the line description in barcode. Previously, `markup` was used to preserve the line breaks in the line description by replacing all `\n`s with `<br/>` which required using `markup` to render the text properly. However, the above mentioned CSS property achieves the same exact result by not ignoring the line breaks in the original string. Forward-Port-Of: odoo/enterprise#90145