mirror of
https://github.com/frappe/erpnext.git
synced 2026-08-24 20:46:38 +00:00
fix: escape help article title, description and category on support page
This commit is contained in:
@@ -49,9 +49,9 @@
|
||||
<div class="card card-md h-100 kb-card">
|
||||
<div class="card-body">
|
||||
<h6 class="card-subtitle mb-2 text-uppercase small text-muted">
|
||||
{{ favorite_article['category'] }}</h6>
|
||||
<h3 class="card-title">{{ favorite_article['title'] }}</h3>
|
||||
<p class="card-text">{{ favorite_article['description'] }}</p>
|
||||
{{ favorite_article['category'] | e }}</h6>
|
||||
<h3 class="card-title">{{ favorite_article['title'] | e }}</h3>
|
||||
<p class="card-text">{{ favorite_article['description'] | e }}</p>
|
||||
</div>
|
||||
<a href="{{ favorite_article['route'] | e }}" class="stretched-link"></a>
|
||||
</div>
|
||||
@@ -72,7 +72,7 @@
|
||||
<h5>{{ item['category'].name }}</h5>
|
||||
<div>
|
||||
{% for article in item['articles'] %}
|
||||
<a href="{{ article.route | e }}" class="mt-2 d-block">{{ article.title }}</a>
|
||||
<a href="{{ article.route | e }}" class="mt-2 d-block">{{ article.title | e }}</a>
|
||||
{% endfor %}
|
||||
</div>
|
||||
</div>
|
||||
|
||||
Reference in New Issue
Block a user