Merge pull request #2 from ursais/13.0-mig-l10n_us_form_1099

[IMP] fixed SQL injection Travis CI error
ursais · Oct 14, 2020 · d97a904 · d97a904
2 parents 9c54cc5 + ca26b89
commit d97a904
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/l10n_us_form_1099/reports/account_payment_1099_report.py b/l10n_us_form_1099/reports/account_payment_1099_report.py
@@ -2,6 +2,8 @@
 # Copyright (C) 2019 Open Source Integrators
 # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl).
 
+from psycopg2.extensions import AsIs
+
 from odoo import fields, models, tools
 
 
@@ -53,6 +55,12 @@ def init(self):
                 %s
                 %s
             )
-        """
-            % (self._table, self._select(), self._from(), self._join(), self._where())
+        """,
+            (
+                AsIs(self._table),
+                AsIs(self._select()),
+                AsIs(self._from()),
+                AsIs(self._join()),
+                AsIs(self._where()),
+            ),
         )