nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-06-25 20:08:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: escape user image url on various templates (backport #56269) (#56271)

Browse Source 
Co-authored-by: Diptanil Saha <diptanil@frappe.io>
fix: escape user image url on various templates (#56269)
This commit is contained in:
mergify[bot]
2026-06-22 03:00:39 +05:30
committed by GitHub
parent f3307b3ca9
commit 3b734f4d5d
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
erpnext/templates/emails/daily_project_summary.html
View File

@@ -10,7 +10,7 @@
<td width="15"></td>
<td valign="top" width="24">
{% if user.image %}
<img class="sender-avatar" width="24" height="24" embed="{{ user.image }}"/>
<img class="sender-avatar" width="24" height="24" embed="{{ user.image | e }}"/>
{% else %}
<div class="sender-avatar-placeholder">
{{ user.full_name[0] }}

2
erpnext/templates/includes/projects/project_row.html
View File

@@ -34,7 +34,7 @@
], as_dict = True) %}
{% if user_details.user_image %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">
<img src="{{ user_details.user_image }}">
<img src="{{ user_details.user_image | e }}">
</span>
{% else %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">

2
erpnext/templates/includes/projects/project_tasks.html
View File

@@ -27,7 +27,7 @@
as_dict = True)%}
{% if user_details.user_image %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">
<img src="{{ user_details.user_image }}">
<img src="{{ user_details.user_image | e }}">
</span>
{% else %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">

2
erpnext/templates/includes/projects/project_timesheets.html
View File

@@ -15,7 +15,7 @@
%}
{% if user_details.user_image %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">
<img src="{{ user_details.user_image }}">
<img src="{{ user_details.user_image | e }}">
</span>
{% else %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">