VAPT Result: Link Manipulation DOM-BASED, Session token in URL in Odoo CE 10 how to resolve?

Question

Good day! Have anyone encountered these two findings on Odoo CE 10 after a Vulnerability Assessment and Penetration Testing?

1. Link Manipulation DOM-BASED