From acd2f589b6cd2d1011be4a4e4965a1b3ed489c37 Mon Sep 17 00:00:00 2001 From: Karthikeyan S Date: Thu, 30 May 2019 13:51:15 +0530 Subject: [PATCH] fix(Barcode): excluding Barcode feild from XSS FIlter (#7605) (cherry picked from commit e579b8960e1c34e7ad0bf794a10596b40530bc09) --- frappe/core/doctype/doctype/doctype.py | 1 - frappe/model/base_document.py | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/frappe/core/doctype/doctype/doctype.py b/frappe/core/doctype/doctype/doctype.py index a06a33df14..fedb605ade 100644 --- a/frappe/core/doctype/doctype/doctype.py +++ b/frappe/core/doctype/doctype/doctype.py @@ -715,7 +715,6 @@ def validate_fields(meta): for d in fields: if not d.permlevel: d.permlevel = 0 if d.fieldtype != "Table": d.allow_bulk_edit = 0 - if d.fieldtype == "Barcode": d.ignore_xss_filter = 1 if not d.fieldname: d.fieldname = d.fieldname.lower() diff --git a/frappe/model/base_document.py b/frappe/model/base_document.py index 922557fee9..982c54c3a1 100644 --- a/frappe/model/base_document.py +++ b/frappe/model/base_document.py @@ -627,7 +627,7 @@ class BaseDocument(object): elif df and (df.get("ignore_xss_filter") or (df.get("fieldtype")=="Code" and df.get("options")!="Email") - or df.get("fieldtype") in ("Attach", "Attach Image") + or df.get("fieldtype") in ("Attach", "Attach Image", "Barcode") # cancelled and submit but not update after submit should be ignored or self.docstatus==2