From a40897254426e71a5926fb6397e51fd3024a6c06 Mon Sep 17 00:00:00 2001
From: Corentin Forler <10946971+cogk@users.noreply.github.com>
Date: Thu, 20 Nov 2025 11:32:15 +0100
Subject: [PATCH] fix: Escape html in desktop Jinja template

---
 frappe/desk/page/desktop/desktop.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/frappe/desk/page/desktop/desktop.html b/frappe/desk/page/desktop/desktop.html
index 15899c57eb..03515cbc9f 100644
--- a/frappe/desk/page/desktop/desktop.html
+++ b/frappe/desk/page/desktop/desktop.html
@@ -4,8 +4,8 @@
         <div class="navbar-home">
             <img
                 class="brand-logo"
-                src="{{ brand_logo }}"
-                alt="{{ _("App Logo") }}"
+                src="{{ brand_logo |e }}"
+                alt="{{ _("App Logo") |e }}"
             >
         </div>
         <div class="desktop-search-wrapper input-group search-bar text-muted ">