From 9b0beec8db93cba70f5abeee875d39fe7d6d7536 Mon Sep 17 00:00:00 2001
From: Catalin <catalin@domatix.com>
Date: Wed, 11 Nov 2020 18:11:07 +0100
Subject: [PATCH] [UPD] helpdesk_mgmt: the `helpdesk.ticket`.`description`
 field `html` widget has been removed as it was allowing some malicious html
 injection

---
 helpdesk_mgmt/models/helpdesk_ticket.py       | 2 +-
 helpdesk_mgmt/views/helpdesk_ticket_views.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/helpdesk_mgmt/models/helpdesk_ticket.py b/helpdesk_mgmt/models/helpdesk_ticket.py
index 9ed8adf789..258067501a 100644
--- a/helpdesk_mgmt/models/helpdesk_ticket.py
+++ b/helpdesk_mgmt/models/helpdesk_ticket.py
@@ -66,7 +66,7 @@ def _read_group_stage_ids(self, stages, domain, order):
 
     number = fields.Char(string="Ticket number", default="/", readonly=True)
     name = fields.Char(string="Title", required=True)
-    description = fields.Text(required=True)
+    description = fields.Text(required=True, string="Description")
     computed_domain_user_id = fields.Many2many(
         "res.users", compute="_compute_domain_user_id"
     )
diff --git a/helpdesk_mgmt/views/helpdesk_ticket_views.xml b/helpdesk_mgmt/views/helpdesk_ticket_views.xml
index d1893e868f..9da021ce01 100644
--- a/helpdesk_mgmt/views/helpdesk_ticket_views.xml
+++ b/helpdesk_mgmt/views/helpdesk_ticket_views.xml
@@ -141,7 +141,7 @@
                     <group>
                         <notebook>
                             <page string="Description" name="description">
-                                <field name="description" widget="html" />
+                                <field name="description" />
                             </page>
                         </notebook>
                     </group>