vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Merge pull request #27528 from akhilnarang/escape-html-awesomebar

Browse source 
fix(search_utils): escape HTML before displaying in awesomebar
This commit is contained in:
Akhil Narang 2024-08-27 11:26:24 +05:30 • committed by GitHub
commit beadf189bf
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
frappe/public/js/frappe/ui/toolbar/search_utils.js
View file

@ -97,7 +97,7 @@ frappe.search.utils = {
break;
}
} else if (match[0]) {
out.label = match[0].bold();
out.label = frappe.utils.escape_html(match[0]).bold();
out.value = match[0];
} else {
console.log("Illegal match", match);