fix: Escape html in timeline

This commit is contained in:
Faris Ansari 2019-08-26 14:54:52 +05:30
parent 5f389b8db1
commit 6aebe0f522

View file

@ -598,6 +598,7 @@ frappe.ui.form.Timeline = class Timeline {
return parts.length < 3;
});
if(parts.length) {
parts = parts.map(frappe.utils.escape_html);
out.push(me.get_version_comment(version, __("changed value of {0}", [parts.join(', ').bold()])));
}
}