Hi,

Yes, Odoo blocks JavaScript execution inside HTML fields by design, even if you set sanitize=False. This is primarily for security reasons, to prevent XSS (Cross-Site Scripting) vulnerabilities.

Why <script> Doesn’t Work:

Even though you're using sanitize=False, Odoo’s rendering engine and modern browsers strip or ignore script tags in HTML fields for safety. This behavior is expected and intended.

Recommended Alternatives:

If you need to trigger modals or wizards dynamically, there are better and safer ways to do this in Odoo:

1. Use t-att-onclick or JS event binding in QWeb templates

Instead of injecting JS directly, attach an event handler to an element:

<button type="button" class="btn btn-primary" t-att-onclick="'trigger_modal(%d)' % record.id">Open Modal</button>

Then define the JS function trigger_modal() in your custom JS file loaded via assets.

2. Use @odoo-module JS to handle events

Create a custom JavaScript module that listens for button clicks and triggers a modal or action:

/** @odoo-module **/

import { Component } from "@odoo/owl";

import { registry } from "@web/core/registry";

class MyModalComponent extends Component {

    setup() {

        // modal logic here

    }

}

registry.category("actions").add("my_module.my_modal_action", MyModalComponent);

Then trigger it from Python or with do_action in JS.

3. Use do_action() in JS

If you're in a web context (e.g. custom JS), use:

this.do_action({

    type: 'ir.actions.act_window',

    res_model: 'your.model',

    view_mode: 'form',

    target: 'new',

});

This opens a wizard/modal cleanly and in line with Odoo standards.

While injecting JS into an HTML field might seem like a shortcut, it's not recommended and won’t work reliably in Odoo 17 due to built-in restrictions. Instead, use Odoo's JS framework and do_action() to build interactive features like modals or wizards.

Hope it helps

Even though you've set sanitize=False on the HTML field, Odoo may still be applying some additional sanitization or escaping to the HTML content, which could prevent the script from running

To achieve the functionality you're looking for, you can consider use of an Odoo Widget with JavaScript

You can find the example from module im_livechat

script_external = fields.Html( 'Script (external)' , compute = '_compute_script_external' , store = False , readonly = True , sanitize = False )

def _compute_script_external(self):
    values = {
        "dbname": self._cr.dbname,
    }
    for record in self:

        values["channel_id"] = record.id
        values["url"] = record.get_base_url()
        record.script_external = self.env['ir.qweb']._render('im_livechat.external_loader', values) if record.id else False

<template id ="external_loader" name ="Livechat : external_script field of livechat channel" > 
    <!-- the loader --> 
    <script t-attf-src ="{{url}}/im_livechat/loader/{{channel_id }}" type ="text/javascript" /> 
    <!-- js of all the required lib (internal and external) --> 
    <script t-attf-src ="{{url}}/im_livechat/assets_embed.js " type ="text/javascript" /> 
</template>