fix: escape html from listview row title

(cherry picked from commit 4c14e68)
frappe · May 8, 2023 · 56bec1d · 56bec1d
1 parent e68fc43
commit 56bec1d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/frappe/public/js/frappe/list/list_view.js b/frappe/public/js/frappe/list/list_view.js
@@ -1000,7 +1000,7 @@ frappe.views.ListView = class ListView extends frappe.views.BaseList {
 					href="${this.get_form_link(doc)}"
 					title="${escaped_subject}"
 					data-doctype="${this.doctype}"
-					data-name="${doc.name}">
+					data-name="${escaped_subject}">
 					${subject}
 				</a>
 			</span>