Friday, September 11, 2026
1 change · master
Security fixes and vulnerability patches
Sales quotes will no longer be confirmed just because any payment succeeds. This prevents very small or incorrect payments from triggering an order confirmation, while still allowing flexible payment links and clearer payment amounts in the customer portal.
Original PR description
Partial revert of da720a8563570a6c0860699d0a542dfa2ee3c392. The automatic confirmation on first payment is error-prone since forged requests could lead to a confirmed SO with a 0.1cents payment regardless of whether a payment link was issued with the given amount. Keep requiring the prepayment amount for SO confirmation, while keeping the payment links open for any amount. Adapt the portal SO views so that the payment amounts are correctly displayed in most situations. --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr