Tuesday, September 1, 2026
1 change · saas-19.3
Security fixes and vulnerability patches
Portal access tokens are now checked using exact matches only, preventing partial or loose comparisons from granting access. This strengthens access control for portal links while preserving expected list-based checks.
Original PR description
Access tokens can only be matched by exact value. Accept `in` and `not in` operators. Task-6481193 Forward-Port-Of: odoo/odoo#285388 Forward-Port-Of: odoo/odoo#285218