vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Merge pull request #8262 from netchampfaris/timeline-escape-html

Browse source 
fix: Escape html in timeline
This commit is contained in:
mergify[bot] 2019-08-27 04:42:15 +00:00 • committed by GitHub
commit 421f070e78
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
frappe/public/js/frappe/form/footer/timeline.js
View file

@ -598,6 +598,7 @@ frappe.ui.form.Timeline = class Timeline {
return parts.length < 3;
});
if(parts.length) {
parts = parts.map(frappe.utils.escape_html);
out.push(me.get_version_comment(version, __("changed value of {0}", [parts.join(', ').bold()])));
}
}