Thursday, April 30, 2026
1 change · saas-19.3
Enhancements to existing features
This update strengthens the security of the AI website editor by rigorously sanitizing HTML and CSS generated by the AI. It validates actions, removes potentially harmful code, and ensures consistent styling, preventing unexpected website behavior and improving overall stability. This protects the Odoo Enterprise platform from potential vulnerabilities.
Original PR description
Following [commit] introducing the AI website editor tool, we would like to sanitize the output AI provides. We first check that the actions we received are valid, and then we sanitize the html content, before it's sent to the frontend, where it will be sanitized as well. We also validate css and check for potentially malicious patterns, and then compile it to see if there aren't any errors, so it doesn't break our styles. [commit]: https://github.com/odoo/enterprise/commit/2f69f868e22173b12d51067f0bf3b5d4dc27228f task-6143725