Daily updates from Odoo
Friday, April 10, 2026
1 change · master
Code cleanup and technical improvements
This update replaces a risky, older method of evaluating expressions with a safer, dedicated system. It simplifies calculations within Odoo reports, specifically in the account_report module, and reduces potential security vulnerabilities. This change improves the stability and maintainability of our reporting features.
Original PR description
Replace the legacy eval-based expr_eval with an AST evaluator for simple expressions, that now also supports variables and context
The new `expr_eval` has a small subset of python syntax: arithmetic, comparisons, boolean operators, literals, lists, tuples, dicts, sets, variables passed as context, subscripting, and min/max.
This works for simple formulas and simple domain expressions and avoids ever going through `eval` for these
(https://github.com/odoo/enterprise/pull/107659 already deprecates `const_eval` btw)
community: https://github.com/odoo/odoo/pull/255216