Daily updates from Odoo
Tuesday, March 17, 2026
1 change
Resolved issues and error corrections
This update strengthens the security of our appointment booking system by adding a required CSRF token to form submissions. It also aligns with standard Odoo practices by using 'keep_query' in the form URLs, which helps prevent unauthorized access. This ensures a more secure and reliable appointment booking experience.
Original PR description
Add a csrf token in the form which is required for post requests. To align with calendar, add the arguments back in the action url of forms and use keep_query which is the more standard approach in the code base and should work for the purpose of detering bots from following the url related: odoo/odoo@0e57ff9cbc87c83276bdb823c5fb08cd4d2806f9 task-4555579