From c42d653da545062d73657565e315191b649df92d Mon Sep 17 00:00:00 2001
From: diptanilsaha <diptanil@frappe.io>
Date: Tue, 18 Aug 2026 22:49:06 +0530
Subject: [PATCH] fix: render terms and conditions through sanitize_html on
 order page

---
 erpnext/templates/pages/order.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/erpnext/templates/pages/order.html b/erpnext/templates/pages/order.html
index 853c2566969..0babd8e57f9 100644
--- a/erpnext/templates/pages/order.html
+++ b/erpnext/templates/pages/order.html
@@ -151,7 +151,7 @@
 	{% if doc.terms %}
 		<div class="terms-and-condition text-muted small">
 			<hr>
-			<p>{{ doc.terms }}</p>
+			<p>{{ frappe.sanitize_html(doc.terms) }}</p>
 		</div>
 	{% endif %}
 {% endblock %}