From e88164e8c722b4a5dde1b46103e0586ea700dec4 Mon Sep 17 00:00:00 2001
From: diptanilsaha <diptanil@frappe.io>
Date: Wed, 19 Aug 2026 02:06:19 +0530
Subject: [PATCH] fix: escape items preview in transaction row template

---
 erpnext/templates/includes/transaction_row.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/erpnext/templates/includes/transaction_row.html b/erpnext/templates/includes/transaction_row.html
index e8f71391b1c..03e04a3a1e8 100644
--- a/erpnext/templates/includes/transaction_row.html
+++ b/erpnext/templates/includes/transaction_row.html
@@ -12,7 +12,7 @@
 		</div>
 		<div class="col-sm-2">
 			<div class="small text-muted items-preview ellipsis ellipsis-width">
-				{{ doc.items_preview }}
+				{{ doc.items_preview | e }}
 			</div>
 		</div>
 		{% if doc.is_rounded_total_disabled() and doc.get('grand_total') %}