nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-08-24 20:46:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: escape partner logo url and partner name in partner pages

Browse Source
This commit is contained in:
diptanilsaha
2026-08-18 22:49:22 +05:30
parent 53394478d9
commit 9a4cb48429
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
erpnext/templates/generators/sales_partner.html
View File

@@ -9,8 +9,8 @@
<div class="row">
<div class="col-md-4">
{% if logo %}
<img itemprop="brand" src="{{ logo }}" class="partner-logo"
alt="{{ partner_name }}" title="{{ partner_name }}" />
<img itemprop="brand" src="{{ logo | abs_url | e }}" class="partner-logo"
alt="{{ partner_name | e }}" title="{{ partner_name | e }}" />
<br><br>
{% endif %}
{% if addresses %}

8
erpnext/templates/pages/partners.html
View File

@@ -10,14 +10,14 @@
<div class="row">
<div class="col-md-3">
{% if partner_info.logo -%}
<a href="{{ partner_info.route }}">
<img itemprop="brand" src="{{ partner_info.logo }}" class="partner-logo"
alt="{{ partner_info.partner_name }}" title="{{ partner_info.partner_name }}" />
<a href="{{ partner_info.route | abs_url | e }}">
<img itemprop="brand" src="{{ partner_info.logo | abs_url | e }}" class="partner-logo"
alt="{{ partner_info.partner_name | e }}" title="{{ partner_info.partner_name | e }}" />
</a>
{%- endif %}
</div>
<div class="col-md-9">
<a href="{{ partner_info.route }}">
<a href="{{ partner_info.route | abs_url | e }}">
<h4>{{ partner_info.partner_name }}</h4>
</a>
<p style="color: #999">{{ partner_info.territory }} - {{ partner_info.partner_type }}</p>