nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-08-11 05:31:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: escape user image url on various templates (#56269)

Browse Source
This commit is contained in:
Diptanil Saha
2026-06-22 02:52:38 +05:30
committed by GitHub
parent ef53319183
commit ea45d41314
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
erpnext/templates/emails/daily_project_summary.html
View File

@@ -10,7 +10,7 @@
<td width="15"></td>
<td valign="top" width="24">
{% if user.image %}
<img class="sender-avatar" width="24" height="24" embed="{{ user.image }}"/>
<img class="sender-avatar" width="24" height="24" embed="{{ user.image | e }}"/>
{% else %}
<div class="sender-avatar-placeholder">
{{ user.full_name[0] }}

2
erpnext/templates/includes/projects/project_row.html
View File

@@ -34,7 +34,7 @@
], as_dict = True) %}
{% if user_details.user_image %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">
<img src="{{ user_details.user_image }}">
<img src="{{ user_details.user_image | e }}">
</span>
{% else %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">

2
erpnext/templates/includes/projects/project_tasks.html
View File

@@ -27,7 +27,7 @@
as_dict = True)%}
{% if user_details.user_image %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">
<img src="{{ user_details.user_image }}">
<img src="{{ user_details.user_image | e }}">
</span>
{% else %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">

2
erpnext/templates/includes/projects/project_timesheets.html
View File

@@ -15,7 +15,7 @@
%}
{% if user_details.user_image %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">
<img src="{{ user_details.user_image }}">
<img src="{{ user_details.user_image | e }}">
</span>
{% else %}
<span class="avatar avatar-small" style="width:32px; height:32px;" title="{{ user_details.full_name }}">