Search 1.9 billion lines of Odoo code on GitHub

sec_defused_document

Author: Naglis Jonaitis
License: LGPL-3
Branch: 11.0
Repository: crtmneric/misc-addons-1
Dependencies: document
Languages: HTML (41, 23.0%), Python (124, 69.7%), and reStructuredText (13, 7.3%)
Other branches: 11.0-wip-imas, and 11.0-wip-payment-opay
Other repositories: Drsmartinkus/misc-addons, Guobower/misc-addons, IaseshviliGeorgiy/misc-addons, PrenorSistemas/misc-addons, TRESCLOUD/misc-addons, Vassy/misc-addons, focusate/naglis-misc-addons, grottas/misc-addons-1, mucahitaz/misc-addons, naglis/misc-addons, sasakuma/misc-addons-1, sm2x/misc-addons-1, and versada/misc-addons

<h1 class="title">Defuse Document Index</h1> <p>Module defuses XML based attacks possible through Odoo's document indexing feature.</p> <p><a class="reference external" href="https://naglis.me/post/odoo-dos-via-document-attachment/">More information</a></p> <a name="installation"></a> <h2>Installation</h2> <p>The <a class="reference external" href="https://pypi.org/project/defusedxml/">defusedxml</a> Python package must be installed.</p> <p>This module should only be installed if the <em>Attachments List and Document Indexation</em> (<code>document</code>) module is installed.</p> <a name="usage"></a> <h2>Usage</h2> <p>This is a technical module, no usage scenarions are defined.</p>