mirror of
https://github.com/frappe/erpnext.git
synced 2026-08-25 13:03:02 +00:00
fix: escape partner introduction and address details in partner pages
This commit is contained in:
@@ -16,9 +16,9 @@
|
||||
{% if addresses %}
|
||||
{% for address in addresses %}
|
||||
<address>
|
||||
{% if address.partner_address %}<p itemprop="address">{{ address.partner_address }}</p>{% endif %}
|
||||
{% if address.phone %}<p itemprop="telephone">{{ address.phone }}</p>{% endif %}
|
||||
{% if address.email %}<p itemprop="email"><svg class="icon icon-xs"><use href="#icon-mail"></use></svg> {{ address.email }}</p>{% endif %}
|
||||
{% if address.partner_address %}<p itemprop="address">{{ address.partner_address | e }}</p>{% endif %}
|
||||
{% if address.phone %}<p itemprop="telephone">{{ address.phone | e }}</p>{% endif %}
|
||||
{% if address.email %}<p itemprop="email"><svg class="icon icon-xs"><use href="#icon-mail"></use></svg> {{ address.email | e }}</p>{% endif %}
|
||||
</address>
|
||||
{% endfor %}
|
||||
{% endif %}
|
||||
|
||||
@@ -21,7 +21,7 @@
|
||||
<h4>{{ partner_info.partner_name }}</h4>
|
||||
</a>
|
||||
<p style="color: #999">{{ partner_info.territory }} - {{ partner_info.partner_type }}</p>
|
||||
<p>{{ partner_info.introduction }}</p>
|
||||
<p>{{ partner_info.introduction | e }}</p>
|
||||
</div>
|
||||
</div>
|
||||
<hr>
|
||||
|
||||
Reference in New Issue
Block a user