diff --git a/frappe/model/delete_doc.py b/frappe/model/delete_doc.py index af67350ab6..b518db0a28 100644 --- a/frappe/model/delete_doc.py +++ b/frappe/model/delete_doc.py @@ -333,7 +333,7 @@ def clear_references(doctype, reference_doctype, reference_name, def clear_timeline_references(link_doctype, link_name): frappe.db.sql("""delete from `tabCommunication Link` - where `tabCommunication Link`.link_doctype='{0}' and `tabCommunication Link`.link_name='{1}'""".format(link_doctype, link_name)) # nosec + where `tabCommunication Link`.link_doctype='{0}' and `tabCommunication Link`.link_name=%s""".format(link_doctype), (link_name)) # nosec def insert_feed(doc): from frappe.utils import get_fullname