odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] website: set multilang to `False`on `website_image` 

Add multilang=False to website_image controller to prevent redirects

Because website_image is decorated with website=True
Requests made for the product image at
`/website/image/product.template/xx_xx/..`
triggered redirections to add the language code to the
requests URLs. This redirection was useless, as setting
the language code for images is non-sense.

Adding `websitelang=False` prevents this redirection.

In addition, the redirection could lead to
SSL security concerns, as the redirection
could use the http:// scheme.

Closes #8515
This commit is contained in:
Paul Catinean 2015-09-15 22:44:35 +03:00 committed by Denis Ledoux
parent 2b1cdd551f
commit 40c35fb48a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
addons/website/controllers/main.py
View File

@ -378,7 +378,7 @@ class Website(openerp.addons.web.controllers.main.Home):
'/website/image',
'/website/image/<model>/<id>/<field>',
'/website/image/<model>/<id>/<field>/<int:max_width>x<int:max_height>'
], auth="public", website=True)
], auth="public", website=True, multilang=False)
def website_image(self, model, id, field, max_width=None, max_height=None):
""" Fetches the requested field and ensures it does not go above
(max_width, max_height), resizing it if necessary.