Special Character Validation

Question

As a developer it is advisable to check and restrict the users from entering special characters like <,>,*,%,' etc to avoid sql injections.
But in the modules of Odoo i do not find any kind of restriction for those. So is it really not necessary to write any code for that and assume that Odoo handles the sql injection characters by itself !
Can anyone suggest anything regarding this as i am a beginner.

Ajin A K · Accepted Answer

*Secure by design* Odoo is designed in a way that prevents introducing most common security vulnerabilities:
SQL injections are prevented by the use of a higher-level API that does not require manual SQL queries
XSS attacks are prevented by the use of a high-level templating system that automatically escapes injected data
The framework prevents RPC access to private methods, making it harder to introduce exploitable vulnerabilities
Reffernce link : https://www.odoo.com/security

Post Terkait	Replies	Tampilan
Securing openerp server serversecurity	2 Mar 15	8243
Validations in odoo studio Diselesaikan studio validations	1 Jan 22	2647
How to implement async validations on form fields? Diselesaikan api validations async	1 Des 19	3605
Date validation, end_date > start_end online validations odoo11	2 Jun 18	11332
How to execute constraints validations in one2many field when it is being saved, not when the parent is saved? one2many constraints validations	1 Mei 17	10996

Pertanyaan ini telah diberikan tanda

Secure by design

Menikmati diskusi? Jangan hanya membaca, ikuti!