[FIX] website_forum: fix answers display order (correct, then votes, then write_date)

The emails containing emails generated with the image widget have absolute path (src='/website/static/...'), adding <base> tag allows the mail client to load it correctly.

[FIX] website: if the first menu referred to a website page and the route for this path is overwritten, the route is not used, the template has not the values of the route. (e.g. contact-us menu in first position if website_crm is installed)
[FIX] website_crm: the path '/crm/contactus' have an error if you doesn't use the website contact form or if you reload the page, instead of redirect to contact form.

The lst_price field on product.template is a related to list_price. As we do not allow to set a value for related fields at creation (see orm.py , L4180), we display the list_price instead (float field).
On the product.product form, we display the lst_price (function field, readonly) as we don't want to allow changing the template price from the product. opw 609497

[FIX] website_crm: the path '/crm/contactus' have an error if you does'nt use the website contact form or if you reload the page, insead of redirect to contact form.

[FIX] website: if the first menu refered to a website page and the route for this path is overwrited, the route is not used, the template has not the values of the route. (e.g. contact-us menu in first position if website_crm is installed)

[MERGE][FIX] product: incomplete declaration of report pricelist

Mixes the mass_mailing_id and mass_mailing_campaign_id
between the two models. Introduced by 9fc4ad99, PR #472

This instance was not actually exploitable for
SQL injection as it is not callable directly
via RPC and guarded by other queries when indirectly
called. Still plain awful.

This instance was not actually exploitable for
SQL injection as it is not callable directly
via RPC and guarded by other queries when indirectly
called. Still plain awful.

[FIX] web_kanban_sparkline, sales_team, stock: use char function field to transmit sparkline data; the data is now correctly dumped into json, and parsed in the widget.

The installation of a multilang localisation (e.g. Belgium) used to install as well account_accountant (and then account_voucher) for no technical reason and was considered as the full accounting package.

[FIX] sale: sales_team: fixed use_quotations field named 'opportunities' instead of 'quotations', copy and paste error probably

[IMP] website_crm - cherry pick from 29ad0216...

[IMP] website_crm - cherry pick from 29ad0216...

[IMP] website_crm - cherry pick from 29ad0216...

[IMP] website_crm - cherry pick from 29ad0216 - Improve contact_us to fill in all fields from the model crm_lead posted in the form except a blacklist of fields.

[IMP] website_crm - cherry pick from 29ad0216 - Improve contact_us to fill in all fields from the model crm_lead posted in the form except a blacklist of fields.

[IMP] website_crm - cherry pick from 29ad0216 - Improve contact_us to fill in all fields from the model crm_lead posted in the form except a blacklist of fields.

[FIX] marketing_campaign: reporting: use the menu already define in marketing module instead of re-adding a new menu.

Correctly take the 'use parent address' into account in the onchange. Slightly updated the view that was weird with this parameter. opw 609344

When tag <drawString> is misused in an RML report, logs a more explicit
error

Empty URLs for OAuth providers do not crash anymore the login screen

When setting a worklog on a project_issue, the field to_invoice is prefilled with on_change_account_id based on the contract settings. As the field was not present on the list view, the information was lost and every worklog was not written as invoiceable, even if enabled on the contract. opw 609082.