mirror of
https://github.com/frappe/erpnext.git
synced 2026-09-13 17:20:36 +00:00
fix: escape partner introduction and address details in partner pages
This commit is contained in:
@@ -16,9 +16,9 @@
|
|||||||
{% if addresses %}
|
{% if addresses %}
|
||||||
{% for address in addresses %}
|
{% for address in addresses %}
|
||||||
<address>
|
<address>
|
||||||
{% if address.partner_address %}<p itemprop="address">{{ address.partner_address }}</p>{% endif %}
|
{% if address.partner_address %}<p itemprop="address">{{ address.partner_address | e }}</p>{% endif %}
|
||||||
{% if address.phone %}<p itemprop="telephone">{{ address.phone }}</p>{% endif %}
|
{% if address.phone %}<p itemprop="telephone">{{ address.phone | e }}</p>{% endif %}
|
||||||
{% if address.email %}<p itemprop="email"><svg class="icon icon-xs"><use href="#icon-mail"></use></svg> {{ address.email }}</p>{% endif %}
|
{% if address.email %}<p itemprop="email"><svg class="icon icon-xs"><use href="#icon-mail"></use></svg> {{ address.email | e }}</p>{% endif %}
|
||||||
</address>
|
</address>
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|||||||
@@ -21,7 +21,7 @@
|
|||||||
<h4>{{ partner_info.partner_name }}</h4>
|
<h4>{{ partner_info.partner_name }}</h4>
|
||||||
</a>
|
</a>
|
||||||
<p style="color: #999">{{ partner_info.territory }} - {{ partner_info.partner_type }}</p>
|
<p style="color: #999">{{ partner_info.territory }} - {{ partner_info.partner_type }}</p>
|
||||||
<p>{{ partner_info.introduction }}</p>
|
<p>{{ partner_info.introduction | e }}</p>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
<hr>
|
<hr>
|
||||||
|
|||||||
Reference in New Issue
Block a user