From 02434ee98c8870f46dfa2cab968e1d025d496c96 Mon Sep 17 00:00:00 2001
From: diptanilsaha <diptanil@frappe.io>
Date: Wed, 19 Aug 2026 02:06:21 +0530
Subject: [PATCH] fix: escape partner introduction and address details in
 partner pages

---
 erpnext/templates/generators/sales_partner.html | 6 +++---
 erpnext/templates/pages/partners.html           | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/erpnext/templates/generators/sales_partner.html b/erpnext/templates/generators/sales_partner.html
index d0add7ef08c..82541592e74 100644
--- a/erpnext/templates/generators/sales_partner.html
+++ b/erpnext/templates/generators/sales_partner.html
@@ -16,9 +16,9 @@
 			{% if addresses %}
 				{% for address in addresses %}
 					<address>
-						{% if address.partner_address %}<p itemprop="address">{{ address.partner_address }}</p>{% endif %}
-						{% if address.phone %}<p itemprop="telephone">{{ address.phone }}</p>{% endif %}
-						{% if address.email %}<p itemprop="email"><svg class="icon icon-xs"><use href="#icon-mail"></use></svg> {{ address.email }}</p>{% endif %}
+						{% if address.partner_address %}<p itemprop="address">{{ address.partner_address | e }}</p>{% endif %}
+						{% if address.phone %}<p itemprop="telephone">{{ address.phone | e }}</p>{% endif %}
+						{% if address.email %}<p itemprop="email"><svg class="icon icon-xs"><use href="#icon-mail"></use></svg> {{ address.email | e }}</p>{% endif %}
 					</address>
 				{% endfor %}
 			{% endif %}
diff --git a/erpnext/templates/pages/partners.html b/erpnext/templates/pages/partners.html
index 71962b90afa..5b6ae2c5670 100644
--- a/erpnext/templates/pages/partners.html
+++ b/erpnext/templates/pages/partners.html
@@ -21,7 +21,7 @@
 				<h4>{{ partner_info.partner_name }}</h4>
 			</a>
 			<p style="color: #999">{{ partner_info.territory }} - {{ partner_info.partner_type }}</p>
-			<p>{{ partner_info.introduction }}</p>
+			<p>{{ partner_info.introduction | e }}</p>
 		</div>
 	</div>
 	<hr>