Tuesday, September 1, 2026
1 change · saas-19.4
Security fixes and vulnerability patches
Portal access tokens are now matched only when the full value is exactly the same, preventing partial or unintended matches. This helps ensure portal access links behave more safely and predictably while still supporting lists of allowed or blocked token values.
Original PR description
Access tokens can only be matched by exact value. Accept `in` and `not in` operators. Task-6481193 Forward-Port-Of: odoo/odoo#285388 Forward-Port-Of: odoo/odoo#285218