mirror of
https://github.com/frappe/erpnext.git
synced 2026-09-18 02:55:20 +00:00
fix: escape activity type in project dashboard template
This commit is contained in:
@@ -3,7 +3,7 @@
|
|||||||
{% for d in data %}
|
{% for d in data %}
|
||||||
<div class="row">
|
<div class="row">
|
||||||
<div class="col-xs-4">
|
<div class="col-xs-4">
|
||||||
<a class="small time-sheet-link" data-activity_type="{{ d.activity_type || "" }}">
|
<a class="small time-sheet-link" data-activity_type="{{ frappe.utils.escape_html(d.activity_type || "") }}">
|
||||||
{{ d.activity_type || __("Unknown") }}</a>
|
{{ d.activity_type || __("Unknown") }}</a>
|
||||||
</div>
|
</div>
|
||||||
<div class="col-xs-8">
|
<div class="col-xs-8">
|
||||||
|
|||||||
Reference in New Issue
Block a user