nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-05-27 17:04:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(Update GSTIN): remove '.__' from template (#17062)

Browse Source 
'.__' Avoid Server Side Template Injection
This commit is contained in:
Himanshu
2019-03-30 12:11:01 +05:30
committed by Faris Ansari
parent 43d79eaa92
commit 20c17b8229
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
erpnext/templates/pages/regional/india/update-gstin.html
View File

@@ -32,7 +32,7 @@
<p class='text-muted'>Please update your GSTIN for us to issue correct tax invoice</p> <p class='text-muted'>Please update your GSTIN for us to issue correct tax invoice</p>
<form method='GET' action='/regional/india/update-gstin.html'> <form method='GET' action='/regional/india/update-gstin.html'>
<input type='hidden' value='{{ party.name }}' name='party'> <input type='hidden' value='{{ party.name }}' name='party'>
{% for address in party.__onload.addr_list %} {% for address in party.get_onload('addr_list') %}
<div class='bordered' style='max-width: 300px; margin-bottom: 15px;'> <div class='bordered' style='max-width: 300px; margin-bottom: 15px;'>
{{ address.display }} {{ address.display }}
<p><input type='text' class='form-control' <p><input type='text' class='form-control'