Tuesday, September 1, 2026
1 change · master
Security fixes and vulnerability patches
Portal access tokens are now checked only by exact match, preventing partial or unintended token matches. This helps ensure shared portal links and protected records are validated more reliably.
Original PR description
Access tokens can only be matched by exact value. Accept `in` and `not in` operators. Task-6481193 Forward-Port-Of: odoo/odoo#285388 Forward-Port-Of: odoo/odoo#285218