fix: escape items preview in transaction row template

2026-08-24 20:46:38 +00:00 · 2026-08-19 02:06:19 +05:30
parent a5aec7ed84
commit e88164e8c7
1 changed files with 1 additions and 1 deletions
--- a/erpnext/templates/includes/transaction_row.html
+++ b/erpnext/templates/includes/transaction_row.html
@@ -12,7 +12,7 @@
 		</div>
 		<div class="col-sm-2">
 			<div class="small text-muted items-preview ellipsis ellipsis-width">
-				{{ doc.items_preview }}
+				{{ doc.items_preview | e }}
 			</div>
 		</div>
 		{% if doc.is_rounded_total_disabled() and doc.get('grand_total') %}