[FIX] http request must pop "session_id" also from `form` and `files` arguments

bzr revid: chs@openerp.com-20131007122611-i92dl924plmo02z3

diff --git a/addons/web/http.py b/addons/web/http.py
index 73e1843..3699b99 100644 (file)
--- a/addons/web/http.py
+++ b/addons/web/http.py
@@ -400,12 +400,12 @@ class HttpRequest(WebRequest):
     def __init__(self, *args):
         super(HttpRequest, self).__init__(*args)
         params = dict(self.httprequest.args)
+        params.update(self.httprequest.form)
+        params.update(self.httprequest.files)
         ex = set(["session_id"])
         for k in params.keys():
             if k in ex:
                 del params[k]
-        params.update(self.httprequest.form)
-        params.update(self.httprequest.files)
         self.params = params
 
     def dispatch(self):