Webkit Report Engine (report_webkit)

Security findings

Security warnings

access_ir_header_img — ACL grants create on 'model_ir_header_img' to every user (portal/public included): no group is set. Verify record rules and test access as an unrelated public/portal user. acl-global-write · source
access_ir_header_webkit — ACL grants create on 'model_ir_header_webkit' to every user (portal/public included): no group is set. Verify record rules and test access as an unrelated public/portal user. acl-global-write · source

Found by automated static analysis: these patterns are usually risky, but only a manual review of the module can confirm a real issue.

Migration considerations

Imports from the old `openerp` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp.osv` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp.tools` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp.osv` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp.osv` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp.addons.report_webkit.webkit_report` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp.tools.translate` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
Imports from the old `openerp.osv` namespace: renamed to `odoo` since Odoo 10.0. migration-openerp-import · source
For a target of Odoo 10.0+: use the `__manifest__.py` manifest name instead of `__openerp__.py`. The filename alone does not establish module age or compatibility. migration-openerp-manifest · source
HeaderHTML — Class 'HeaderHTML' still inherits from the old-style `osv.osv` API: rewrite it against `models.Model`/`models.TransientModel`/`models.AbstractModel` - the old `osv`/`orm` API was removed entirely in modern Odoo. migration-old-api-base · source
HeaderHTML — Class 'HeaderHTML' declares `_columns` as a plain dict: old-style field/default declarations, replace with `fields.X(...)` class attributes and `default=`. migration-old-style-fields · source
HeaderImage — Class 'HeaderImage' still inherits from the old-style `osv.osv` API: rewrite it against `models.Model`/`models.TransientModel`/`models.AbstractModel` - the old `osv`/`orm` API was removed entirely in modern Odoo. migration-old-api-base · source
HeaderImage — Class 'HeaderImage' declares `_columns` as a plain dict: old-style field/default declarations, replace with `fields.X(...)` class attributes and `default=`. migration-old-style-fields · source
act_report_xml_view — For a target of Odoo 17.0+: view 'act_report_xml_view' uses `attrs=`/`states=`, which are no longer supported. Convert modifiers to direct Python boolean expressions in `invisible`/`readonly`/`required`; preserve the original AND/OR logic. migration-view-attrs-states · source
ir_actions_report_xml — Class 'ir_actions_report_xml' still inherits from the old-style `orm.Model` API: rewrite it against `models.Model`/`models.TransientModel`/`models.AbstractModel` - the old `osv`/`orm` API was removed entirely in modern Odoo. migration-old-api-base · source
ir_actions_report_xml — Class 'ir_actions_report_xml' declares `_columns` as a plain dict: old-style field/default declarations, replace with `fields.X(...)` class attributes and `default=`. migration-old-style-fields · source
report_webkit_actions — Class 'report_webkit_actions' still inherits from the old-style `osv.osv_memory` API: rewrite it against `models.Model`/`models.TransientModel`/`models.AbstractModel` - the old `osv`/`orm` API was removed entirely in modern Odoo. migration-old-api-base · source
report_webkit_actions — Class 'report_webkit_actions' declares `_columns` as a plain dict: old-style field/default declarations, replace with `fields.X(...)` class attributes and `default=`. migration-old-style-fields · source
report_webkit_actions — Class 'report_webkit_actions' declares `_defaults` as a plain dict: old-style field/default declarations, replace with `fields.X(...)` class attributes and `default=`. migration-old-style-fields · source
res_company — Class 'res_company' still inherits from the old-style `osv.osv` API: rewrite it against `models.Model`/`models.TransientModel`/`models.AbstractModel` - the old `osv`/`orm` API was removed entirely in modern Odoo. migration-old-api-base · source
res_company — Class 'res_company' declares `_columns` as a plain dict: old-style field/default declarations, replace with `fields.X(...)` class attributes and `default=`. migration-old-style-fields · source

Migration review checklist, not a compatibility verdict. No target version is selected: apply version-specific advice only when migrating to that version or later.

Repository: odoo/odoo · module folder
Module version: 0.9
Category: Hidden
Folder size: 1.3 MB
License: LGPL-3
Application: No
Auto-installable: No
Website: None
Last tracking update: 2026-08-07 04:56:42
Authors: Camptocamp
Maintainers: Camptocamp
Committers: Olivier Dony, Raphael Collet, Christophe Simonis, Martin Trigaux, Odoo Translation Bot, Aaron Bohy, Yannick Tivisse

Odoo dependencies

odoo/odoo:

- base

- report

- web

Python dependencies

None

System dependencies

None

Required by

account_central_journal, account_statement_ext, base_headers_webkit, delivery_carrier_label_default_webkit, hr_attendance_analysis, invoice_webkit, l10n_it_prima_nota_cassa, mrp_webkit, project_indicators, purchase_order_webkit, purchase_order_webkit_with_notes, report_webkit_chapter_server, sale_order_proforma_webkit, sale_order_webkit, stock_picking_webkit

Description

This module adds a new Report Engine based on WebKit library (wkhtmltopdf) to support reports designed in HTML + CSS.
=====================================================================================================================

The module structure and some code is inspired by the report_openoffice module.

The module allows:
------------------
    - HTML report definition
    - Multi header support
    - Multi logo
    - Multi company support
    - HTML and CSS-3 support (In the limit of the actual WebKIT version)
    - JavaScript support
    - Raw HTML debugger
    - Book printing capabilities
    - Margins definition
    - Paper size definition

Multiple headers and logos can be defined per company. CSS style, header and
footer body are defined per company.

For a sample report see also the webkit_report_sample module, and this video:
    http://files.me.com/nbessi/06n92k.mov

Requirements and Installation:
------------------------------
This module requires the ``wkhtmltopdf`` library to render HTML documents as
PDF. Version 0.9.9 or later is necessary, and can be found at
http://code.google.com/p/wkhtmltopdf/ for Linux, Mac OS X (i386) and Windows (32bits).

After installing the library on the OpenERP Server machine, you may need to set
the path to the ``wkhtmltopdf`` executable file in a system parameter named
``webkit_path`` in Settings -> Customization -> Parameters -> System Parameters

If you are experiencing missing header/footer problems on Linux, be sure to
install a 'static' version of the library. The default ``wkhtmltopdf`` on
Ubuntu is known to have this issue.


TODO:
-----
    * JavaScript support activation deactivation
    * Collated and book format support
    * Zip return for separated PDF
    * Web client WYSIWYG

Code Analysis info_outline

Views touched (5)

XML ID	Name	Model	Type	Status
`act_report_xml_view`	ir.actions.report.xml.inherit	ir.actions.report.xml		Inherits base.act_report_xml_view
`currency_del_img`	res.company.form.inherit	res.company	form	Inherits base.view_company_form
`header_img`	res.company.header.img	ir.header_img	form	New
`header_webkit`	res.company.header.html	ir.header_webkit	form	New
`view_report_webkit_actions`	Report Webkit actions wizard	report.webkit.actions	form	New

HTTP endpoints (0)

No HTTP endpoints found for this module.

Models touched (1)

New fields (0)

No new fields.

Public methods (0)

No public methods.

Loading…