Daily updates from Odoo
Friday, May 1, 2026
1 change · master
Resolved issues and error corrections
This update strengthens the security of the AI-powered website editor by rigorously sanitizing HTML and CSS generated by the AI. It ensures that AI-produced content is safe and doesn't introduce potential vulnerabilities or break website styling. This improves the overall stability and security of the enterprise website.
Original PR description
Following [commit] introducing the AI website editor tool, we would like to sanitize the output AI provides. We first check that the actions we received are valid, and then we sanitize the html content, before it's sent to the frontend, where it will be sanitized as well. We also validate css and check for potentially malicious patterns, and then compile it to see if there aren't any errors, so it doesn't break our styles. [commit]: https://github.com/odoo/enterprise/commit/2f69f868e22173b12d51067f0bf3b5d4dc27228f task-6143725 Forward-Port-Of: odoo/enterprise#114577