nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-02-19 01:25:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

prevent jinja exec in search title

Browse Source
This commit is contained in:
Prateeksha Singh
2018-08-06 12:33:34 +05:30
committed by GitHub
parent 5037e0d1ed
commit 0c796229dc
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
erpnext/templates/pages/search_help.py
View File

@@ -10,7 +10,9 @@ def get_context(context):
context.no_cache = 1
if frappe.form_dict.q:
query = str(utils.escape(sanitize_html(frappe.form_dict.q)))
context.title = _('Help Results for "{0}"').format(query)
context.title = _('Help Results for')
context.query = query
context.route = '/search_help'
d = frappe._dict()
d.results_sections = get_help_results_sections(query)