Special Character Validation

Question

As a developer it is advisable to check and restrict the users from entering special characters like <,>,*,%,' etc to avoid sql injections.
But in the modules of Odoo i do not find any kind of restriction for those. So is it really not necessary to write any code for that and assume that Odoo handles the sql injection characters by itself !
Can anyone suggest anything regarding this as i am a beginner.

Ajin A K · Accepted Answer

*Secure by design* Odoo is designed in a way that prevents introducing most common security vulnerabilities:
SQL injections are prevented by the use of a higher-level API that does not require manual SQL queries
XSS attacks are prevented by the use of a high-level templating system that automatically escapes injected data
The framework prevents RPC access to private methods, making it harder to introduce exploitable vulnerabilities
Reffernce link : https://www.odoo.com/security

Powiązane posty	Odpowiedzi	Widoki
Securing openerp server serversecurity	2 mar 15	8235
Validations in odoo studio Rozwiązane studio validations	1 sty 22	2644
How to implement async validations on form fields? Rozwiązane api validations async	1 gru 19	3603
Date validation, end_date > start_end online validations odoo11	2 cze 18	11329
How to execute constraints validations in one2many field when it is being saved, not when the parent is saved? one2many constraints validations	1 maj 17	10975

To pytanie dostało ostrzeżenie

Secure by design

Podoba Ci się ta dyskusja? Dołącz do niej!