Cédric Krier ccda215615 Prevent double underscore in safe_eval ...

CVE-2014-6633
issue4155
review5601002

2014-09-29 17:23:37 +02:00

..

backend

Use sequence as parameter of query for MySQLdb >= 1.2.5

2014-09-04 00:19:39 +02:00

ir

Add image widget to rn[gc]

2014-09-19 17:11:28 +02:00

model

Use context to check model and field access

2014-09-17 21:43:53 +02:00

modules

Fix wrong is_module_to_install test introduced in changeset b0a271549ddd

2014-09-13 13:56:43 +02:00

protocols

Fix restore of database

2014-09-21 12:28:31 +02:00

report

Use context to check model and field access

2014-09-17 21:43:53 +02:00

res

Use context to check model and field access

2014-09-17 21:43:53 +02:00

tests

Prevent double underscore in safe_eval

2014-09-29 17:23:37 +02:00

tools

Prevent double underscore in safe_eval

2014-09-29 17:23:37 +02:00

webdav

Refactore configuration to allow easy extention

2014-09-03 23:32:01 +02:00

wizard

Use context to check model and field access

2014-09-17 21:43:53 +02:00

__init__.py

Force UTC as timezone

2013-11-15 02:26:58 +01:00

cache.py

Refactore configuration to allow easy extention

2014-09-03 23:32:01 +02:00

config.py

RawConfigParser.getboolean raise AttributeError in case of missing option

2014-09-19 19:27:38 +02:00

const.py

Remove unused CONTEXT_CACHE_SIZE constant

2012-03-12 15:34:53 +01:00

convert.py

Speed up XML import

2014-07-31 19:36:16 +02:00

error.py

Fix test for None error_args.

2013-09-21 00:34:15 +02:00

exceptions.py

Fix pep8 and pyflakes

2012-04-01 23:08:15 +02:00

monitor.py

Monitor also the configuration file

2014-09-13 15:22:01 +02:00

pool.py

Refactore configuration to allow easy extention

2014-09-03 23:32:01 +02:00

pyson.py

Ensure __and__/__or__ of PYSON is always boolean

2014-09-18 19:14:37 +02:00

rpc.py

Use context to check model and field access

2014-09-17 21:43:53 +02:00

security.py

Refactore configuration to allow easy extention

2014-09-03 23:32:01 +02:00

server.py

Log error if timezone is not UTC

2014-09-19 18:46:02 +02:00

test_loader.py

Improve unittest to run test_suite inside setuptools

2010-03-12 17:47:49 +01:00

transaction.py

Use the original context in AttributeManager

2014-03-09 17:20:05 +01:00

tryton.rnc

Add depends attribute to data tag

2014-02-06 22:30:11 +01:00

url.py

Refactore configuration to allow easy extention

2014-09-03 23:32:01 +02:00

version.py

Increase version number

2014-04-21 20:28:18 +02:00