Skip to content
Snippets Groups Projects
  1. Oct 01, 2019
  2. Sep 30, 2019
  3. Oct 01, 2019
    • Antony Lesuisse's avatar
      [IMP] l10n_generic_coa: improve chart · 4ddce229
      Antony Lesuisse authored
      
      Renamed xml ids of the main accounts (in prepartion for a future multi l10n
      demo system). Change account numbering to match quickbook and other US GAAP
      convention and recommendations.
      
      closes odoo/odoo#37606
      
      Signed-off-by: default avataroco-odoo <oco-odoo@users.noreply.github.com>
      4ddce229
    • ryv-odoo's avatar
      [FIX] mass_mailing_sms : fix KPI in draft · 3bca1d52
      ryv-odoo authored
      
      There is the % Clicked stat button in SMS marketing form view when it
      is on draft or test. Fix to be only visible
      when the state is not in draft or test
      
      TASK_ID : 2078918
      
      closes odoo/odoo#37615
      
      Signed-off-by: default avatarThibault Delavallee (tde) <tde@openerp.com>
      3bca1d52
    • ryv-odoo's avatar
      [FIX] mass_mailing: mail template become invisible after saving · a7489fee
      ryv-odoo authored
      
      Bug
      ===
      In the mailing mailing form view, after saving the email and creating it, the body is invisible and one needs to edit and save again to see the content
      The view has two fields with the same name
      
      Fix
      ===
      At the end, we have only one field and some condition on the attributes (class, widget)
      
      TASK_ID : 2078918
      
      Co-authored-by: default avatarStéphane Debauche <std@odoo.com>
      a7489fee
    • ryv-odoo's avatar
      [FIX] mass_mailing_sms : diplay count pf contact list incorrect · 43a880eb
      ryv-odoo authored
      In the sms marketing, the display name of the contact list was wrong
      during the search of the many2one widget (contact list field,
      count of valid number was the count of valid email).
      Add a context attribute on the widget depending of the global context
      to force the rigth count.
      
      TASK_ID : 2078918
      43a880eb
    • ryv-odoo's avatar
      [FIX] mass_mailing_sms : the sms_allow_unsubscribe field invisible for mailing marketing · f422cfdb
      ryv-odoo authored
      The field sms_allow_unsubscribe field was visible and checkable on the
      email marketing app, but this field is reserved to the
      sms marketing. Add a invisible condition.
      
      TASK_ID : 2078918
      f422cfdb
    • Samuel Degueldre's avatar
      [IMP] Prevent reverse tabnabbing in plaintext2html, linkify, _makeLink · 74e23b2e
      Samuel Degueldre authored
      
      These functions convert plain text links into clickable hyperlinks.
      These open in new tabs but did not have the "noreferrer noopener" rel
      attributes, which made them susceptible to reverse tabnabbing.
      
      A lot of attack vectors were available to unregistered, uninvited
      anonymous users and presented a significant phishing threat (such as
      posting links in the instant-chat, through a mail-alias, in a forum post
      or in a twitter post) and leading the operator to believe he had been
      disconnected from odoo in the original tab, prompting them to enter
      their credentials.
      
      while these three places will add the noreferrer and noopener attributes
      on the anchor tags generated by them, there are still many places that
      create hyperlinks without the use of these functions, although most of
      them are static links, they still represent a transitive security
      vulnerability to the linked sites.
      
      There are also a few modules and widgets that roll out their own links
      or open new tabs unsafely using window.open(), these will need to be
      patched separately.
      
      closes odoo/odoo#37591
      
      Signed-off-by: default avatarOlivier Dony (odo) <odo@openerp.com>
      74e23b2e
    • Laurent Smet's avatar
      [FIX] account: Fix editable fields on editable grouped list views · e121bacb
      Laurent Smet authored
      
      Nothing is editable on account.move.line tree view.
      On grouped tree views, only account_id, name, ref, tag_ids, date_maturity are editable.
      The account hierarchy must not be visible on the partner ledger view.
      
      closes odoo/odoo#37528
      
      Signed-off-by: default avatarQuentin De Paoli (qdp) <qdp@openerp.com>
      e121bacb
  4. Sep 30, 2019
  5. Oct 01, 2019
  6. Sep 24, 2019
  7. Oct 01, 2019
Loading