From 66272a168de90760aab6d13465db354e6f1241b4 Mon Sep 17 00:00:00 2001
From: Rushabh Mehta <rmehta@gmail.com>
Date: Wed, 12 Apr 2017 14:31:57 +0530
Subject: [PATCH] [minor] README.md + encode query parameter in search

---
 README.md                                          |  8 ++++++++
 .../includes/projects/project_search_box.html      | 14 +++++++-------
 erpnext/templates/pages/product_search.html        |  2 +-
 3 files changed, 16 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index 4f59339b2f..2a813cf68c 100644
--- a/README.md
+++ b/README.md
@@ -38,6 +38,14 @@ The ERPNext code is licensed as GNU General Public License (v3) and the Document
 
 ---
 
+## Contributing
+
+1. [Pull Request Requirements](https://github.com/frappe/erpnext/wiki/Pull-Request-Guidelines)
+1. [Translations](https://translate.erpnext.com)
+1. [Chart of Accounts](https://charts.erpnext.com)
+
+---
+
 ## Logo and Trademark
 
 The brand name ERPNext and the logo are trademarks of Frappe Technologies Pvt. Ltd.
diff --git a/erpnext/templates/includes/projects/project_search_box.html b/erpnext/templates/includes/projects/project_search_box.html
index ab02f0c143..96eb10cf93 100644
--- a/erpnext/templates/includes/projects/project_search_box.html
+++ b/erpnext/templates/includes/projects/project_search_box.html
@@ -1,19 +1,19 @@
 <div class="project-search text-muted pull-right">
-	<input type="text" id="project-search" placeholder="Quick Search">	
-	<i class="octicon octicon-search"></i> 	
+	<input type="text" id="project-search" placeholder="Quick Search">
+	<i class="octicon octicon-search"></i>
 </div>
 <div class="clearfix pull-right" style="width:300px;">
-	<h4 class="project-search-results pull-left"></h4> 
-	<p class="pull-right"> 
-		<a style="display: none; padding-left:5px;" href="/projects?project={{doc.name}}" class="octicon octicon-x 			text-extra-muted clear" title="Clear Search" ></a> 
-	</p> 
+	<h4 class="project-search-results pull-left"></h4>
+	<p class="pull-right">
+		<a style="display: none; padding-left:5px;" href="/projects?project={{doc.name}}" class="octicon octicon-x 			text-extra-muted clear" title="Clear Search" ></a>
+	</p>
 </div>
 
 <script>
 frappe.ready(function() {
 	if(get_url_arg("q")){
 	var txt = get_url_arg("q");
-	$(".project-search-results").html("Search results for : " + txt);
+	$(".project-search-results").html("Search results for : " + encodeURIComponent(txt));
 	$(".clear").toggle(true);
 	}
 	var thread = null;
diff --git a/erpnext/templates/pages/product_search.html b/erpnext/templates/pages/product_search.html
index c7134b0030..d00f535735 100644
--- a/erpnext/templates/pages/product_search.html
+++ b/erpnext/templates/pages/product_search.html
@@ -10,7 +10,7 @@
 <script>
 frappe.ready(function() {
 	var txt = get_url_arg("search");
-	$(".search-results").html("{{ _('Search results for') }}: " + txt);
+	$(".search-results").html("{{ _('Search results for') }}: " + encodeURIComponent(txt));
 	window.search = txt;
 	window.start = 0;
 	window.get_product_list();