From 56bec1d43cf2d5c84db111237336ded713b6fb38 Mon Sep 17 00:00:00 2001 From: Shariq Ansari Date: Mon, 8 May 2023 12:05:22 +0530 Subject: [PATCH] fix: escape html from listview row title (cherry picked from commit 4c14e6835db1c77f75978603b5acb7c02297f3a7) --- frappe/public/js/frappe/list/list_view.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frappe/public/js/frappe/list/list_view.js b/frappe/public/js/frappe/list/list_view.js index fafc3efacec..fbacb808c8e 100644 --- a/frappe/public/js/frappe/list/list_view.js +++ b/frappe/public/js/frappe/list/list_view.js @@ -1000,7 +1000,7 @@ frappe.views.ListView = class ListView extends frappe.views.BaseList { href="${this.get_form_link(doc)}" title="${escaped_subject}" data-doctype="${this.doctype}" - data-name="${doc.name}"> + data-name="${escaped_subject}"> ${subject}