From 3e8a1928281fef36a6dc17f16f0ec12ce659d92d Mon Sep 17 00:00:00 2001
From: Ankush Menat <ankush@frappe.io>
Date: Mon, 11 Sep 2023 18:01:09 +0530
Subject: [PATCH] chore: escape instead of sanitizing

---
 frappe/templates/includes/navbar/navbar_search.html | 2 +-
 frappe/templates/includes/search_template.html      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/frappe/templates/includes/navbar/navbar_search.html b/frappe/templates/includes/navbar/navbar_search.html
index 2483b6bb13..052940840c 100644
--- a/frappe/templates/includes/navbar/navbar_search.html
+++ b/frappe/templates/includes/navbar/navbar_search.html
@@ -3,7 +3,7 @@
 		<form action='/search'>
 		<input name='q' class='form-control navbar-search' type='text'
 			value='{{ frappe.form_dict.q|e if frappe.form_dict.q else ''}}'
-			{% if not frappe.form_dict.q%}placeholder="{{ _("Search...") }}"{% endif %}>
+			{% if not frappe.form_dict.q %}placeholder="{{ _("Search...") }}"{% endif %}>
 		</form>
 	</li>
 {% endif %}
diff --git a/frappe/templates/includes/search_template.html b/frappe/templates/includes/search_template.html
index cf2cb33ac1..06f14942f5 100644
--- a/frappe/templates/includes/search_template.html
+++ b/frappe/templates/includes/search_template.html
@@ -28,7 +28,7 @@
 				</div>
 			</div>
 			{% if frappe.form_dict.scope %}
-				<input type="text" hidden name="scope" value="{{ frappe.sanitize_html(frappe.form_dict.scope) }}">
+				<input type="text" hidden name="scope" value="{{ frappe.utils.escape_html(frappe.form_dict.scope) }}">
 			{% endif %}
 		</form>
 	</div>