|
|
|
merged
[FIX] point_of_sale: pass noupdate True for pos load demo data
|
[FIX] point_of_sale: pass noupdate True for pos load demo data
Backport of odoo/odoo@1bed05062d1a76763156220e6626ab071b3c578d (17.0),
adapted to 16.0 where the onboarding data is loaded by
pos.session.check_product_wizard.load_demo_products().
When a database has no PoS product, the user can load sample products
from the PoS opening wizard. They are created from
data/point_of_sale_onboarding.xml, which is not listed in the manifest,
with noupdate=False. On the next upgrade of point_of_sale these xmlids
are not reloaded, so _process_end() tries to delete the records. Once
one of the sample products has been sold, the upgrade crashes:
psycopg2.errors.ForeignKeyViolation: update or delete on table
"product_product" violates foreign key constraint
"pos_order_line_product_id_fkey" on table "pos_order_line"
and the unsold sample products are silently deleted.
Load the file with noupdate=True so the records are left alone on
upgrade.
Databases which already loaded the sample products keep their
noupdate=False xmlids and must be fixed by setting noupdate on them.
|
Killed
|
|
|
|
|
|
|
|
merged
Merged from upstream 16 20261105 01
|
Merge remote-tracking branch 'odoo/16.0' into 16.0
|
Killed
|
|
|
|
|
|
|
|
merged
Merged from upstream 16 20261029 01
|
Merge remote-tracking branch 'odoo/16.0' into 16.0
|
Killed
|
|
|
|
|
|
|
|
merged
Merged from upstream 16 20261024 01
|
Merge remote-tracking branch 'odoo/16.0' into 16.0
|
Killed
|
|
|
|
|
|
|
|
merged
Merged from upstream 16 20261012 01
|
Merge remote-tracking branch 'odoo/16.0' into 16.0
|
Killed
|
|
|
|
|
|
|
|
merged
[FIX] website_sale: a garbage ?category= on a product page must not answer 500
|
[FIX] website_sale: a garbage ?category= on a product page must not
answer 500
SQL-injection scanners request product pages with payloads in ?category=
(e.g. "1' AND 1=1 UNION SELECT NULL-- -"): int(category) raised
ValueError in _prepare_product_values and the page answered 500 - 1,031
times in one week on a production 16.0 shop. The earlier guard only
covered the shop listing. The category only drives the breadcrumb and
the
back link here, so an invalid one is ignored, as upstream 19.0 does.
|
Killed
|
|
|
|
|
|
|
|
merged
Merge from upstream 16 20260919 01
|
Merge remote-tracking branch 'odoo/16.0' into 16.0
|
Failed
|
|
|
|
|
|
|
|
merged
[FIX] website_sale: a garbage ?category= on a product page must not answer 500
|
[FIX] website_sale: a garbage ?category= on a product page must not answer 500
SQL-injection scanners request product pages with payloads in ?category=
(e.g. "1' AND 1=1 UNION SELECT NULL-- -"): int(category) raised
ValueError in _prepare_product_values and the page answered 500 - 1,031
times in one week on a production 16.0 shop. The earlier guard only
covered the shop listing. The category only drives the breadcrumb and the
back link here, so an invalid one is ignored, as upstream 19.0 does.
|
Killed
|
|
Not finished
|
|
|
|
|
|
merged
Merge from upstream 16 20260911 01
|
Merge remote-tracking branch 'odoo/16.0' into 16.0
|
Killed
|
|
|
|
|
|
|
|
open
[16.0][I18N] survey: translate template certificate
|
Merge branch '16.0' into 16_survey_translate
|
Killed
|
|
|
|
|