Shiloh/brotherton-erpnext
1
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

prevent jinja exec in search title

Browse Source
This commit is contained in:
Prateeksha Singh 2018-08-06 12:33:34 +05:30 committed by GitHub
parent 5037e0d1ed
commit 0c796229dc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
erpnext/templates/pages/search_help.py
View File

@ -10,7 +10,9 @@ def get_context(context):
context.no_cache = 1
if frappe.form_dict.q:
query = str(utils.escape(sanitize_html(frappe.form_dict.q)))
context.title = _('Help Results for "{0}"').format(query)
context.title = _('Help Results for')
context.query = query
context.route = '/search_help'
d = frappe._dict()
d.results_sections = get_help_results_sections(query)