From 0c796229dc2bb4b735d90e9249c84415c5abfd69 Mon Sep 17 00:00:00 2001 From: Prateeksha Singh Date: Mon, 6 Aug 2018 12:33:34 +0530 Subject: [PATCH] prevent jinja exec in search title --- erpnext/templates/pages/search_help.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/erpnext/templates/pages/search_help.py b/erpnext/templates/pages/search_help.py index e564e217c7..4a4b0dbd93 100644 --- a/erpnext/templates/pages/search_help.py +++ b/erpnext/templates/pages/search_help.py @@ -10,7 +10,9 @@ def get_context(context): context.no_cache = 1 if frappe.form_dict.q: query = str(utils.escape(sanitize_html(frappe.form_dict.q))) - context.title = _('Help Results for "{0}"').format(query) + context.title = _('Help Results for') + context.query = query + context.route = '/search_help' d = frappe._dict() d.results_sections = get_help_results_sections(query)