vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: escape icon and color fields

Browse source
This commit is contained in:
Shrihari Mahabal 2026-04-22 14:47:11 +05:30
parent 873362830a
commit b593285b56
1 changed files with 12 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
frappe/public/js/frappe/form/formatters.js
View file

@ -394,20 +394,20 @@ frappe.form.formatters = {
return formatted_values.join(", ");
},
Color: (value) => {
return value
? `<div>
<div class="selected-color" style="background-color: ${value}"></div>
<span class="color-value">${value}</span>
</div>`
: "";
if (!value) return "";
let escaped_value = frappe.utils.escape_html(value);
return `<div>
<div class="selected-color" style="background-color: ${escaped_value}"></div>
<span class="color-value">${escaped_value}</span>
</div>`;
},
Icon: (value) => {
return value
? `<div class='flex' style='gap: 8px;'>
<div class="selected-icon">${frappe.utils.icon(value, "md")}</div>
<span class="icon-value">${value}</span>
</div>`
: "";
if (!value) return "";
let escaped_value = frappe.utils.escape_html(value);
return `<div class='flex' style='gap: 8px;'>
<div class="selected-icon">${frappe.utils.icon(escaped_value, "md")}</div>
<span class="icon-value">${escaped_value}</span>
</div>`;
},
Attach: format_attachment_url,
AttachImage: format_attachment_url,