Mounier Florian

Introduce persistent session and multiplexing

2

URL like /session/sessionName could be used to name a terminal instance and keeping it even if the browser is closed and reopened. Using websockets it would be easy to get...

Reintroduce the raw html feature securized

3

Use a good script stripping method to clean the inserted html to avoid mailicious script injection. http://stackoverflow.com/questions/6659351/removing-all-script-tags-from-html-with-js-regular-expression and https://github.com/LiftoffSoftware/htmltag/blob/master/htmltag.py#L186 could be a start.

A nice feature would be adding an option to override or extend the terminal style and easily add js modules. As a first step adding an option to the server...

Using su to login is kind of hackish. It would be better to use some more standard way as mentionned here: http://www.reddit.com/r/linux/comments/1z6gif/butterfly_your_everyday_terminal_in_your_web/cfr3tzr

All methods are cached

7

PUT, POST, DELETE methods aren't executed when cache is enabled (and a previous request has been made within the cache window) This is really problematic, only GET methods should be...

[IMP] shopinvader: Add country states in countries settings route

6

`GET /shopinvader/settings/countries `now returns for instance: ``` [ { "name": "France", "code": "FR", "id": 75, "state_ids": [] }, { "name": "United States", "code": "US", "id": 233, "state_ids": [ { "name":...

[IMP] shopinvader_sale_coupon: Add remove_coupon route to remove a coupon from code

2

This PR adds an utility method to remove a coupon from a cart by specifying the coupon code. Works for coupon and promotion (check coupon first).

Add module to allow jwt authenticated sellers belonging to a customizable claim group to list a specific domain of partners and create carts on the behalf of them. Blocked by...

This PR is the shopinvader counter part of https://github.com/OCA/server-auth/pull/346 and is obviously blocked by it. It also changes the way the shopinvader partner is got by directly using the `jwt_partner_id`...