TIP: You can type at any time to perform a new search.
CMS Toolbar Example
cms_toolbar_example · OCA/website-cms
Security findings
Security warnings
access_cms_toolbar_content_example— ACL grants write/create/unlink on 'model_cms_toolbar_content_example' to every user (portal/public included): no group is set. Verify record rules and test access as an unrelated public/portal user. acl-global-write · source
Found by automated static analysis: these patterns are usually risky, but only a manual review of the module can confirm a real issue.
Migration considerations
example— Template 'example' uses `t-raw`, deprecated since Odoo 15.0. Prefer `t-out` for escaped output. For intentional HTML, verify sanitization at its source before marking it safe; Markup alone does not sanitize untrusted content. migration-template-t-raw · source
Migration review checklist, not a compatibility verdict. No target version is selected: apply version-specific advice only when migrating to that version or later.
- Repository
- OCA/website-cms · module folder · Try on Runboat
- Module version
- 1.0.0
- Category
- Uncategorized
- Folder size
- 0.02 MB
- License
- LGPL-3
- Application
- No
- Auto-installable
- No
- Website
- None
- Last tracking update
- 2026-08-07 07:25:01
- Authors
- Odoo Community Association (OCA), Simone Orsi
- Maintainers
- Odoo Community Association (OCA), Simone Orsi
- Committers
- Simone Orsi, OCA Transbot, oca-travis
Code Analysis
Views touched (1)
| XML ID | Name | Model | Type | Status |
|---|---|---|---|---|
example |
CMS Toolbar Example | ir.ui.view | qweb | New |
HTTP endpoints (1)
| Route(s) | Handler | Auth | Type | Methods | Flags |
|---|---|---|---|---|---|
/cms-toolbar-example |
Example.toolbar_example_list |
user | http | ALL | website |
Models touched (1)
New fields (1)
-
nameCharrequired=True
-
cms_after_delete_url(self)@property