CalvinBackup/erpnext
1
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-02-13 09:43:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: sanitize projects field in tasks webform (#50089)

Browse Source 
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
(cherry picked from commit f8b50d3ffa)
This commit is contained in:
Akhil Narang
2025-10-14 18:37:59 +05:30
committed by Mergify
parent d82106cb76
commit aadc83d0d9
1 changed files with 12 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
erpnext/projects/web_form/tasks/tasks.py
View File

@@ -1,15 +1,17 @@
import urllib.parse
import frappe import frappe
def get_context(context): def get_context(context):
if frappe.form_dict.project: if project := frappe.form_dict.project:
context.parents = [ title = frappe.utils.data.escape_html(project)
{"title": frappe.form_dict.project, "route": "/projects?project=" + frappe.form_dict.project} route = "/projects?" + urllib.parse.urlencode({"project": project})
] context.parents = [{"title": title, "route": route}]
context.success_url = "/projects?project=" + frappe.form_dict.project context.success_url = route
elif context.doc and context.doc.get("project"): elif context.doc and (project := context.doc.get("project")):
context.parents = [ title = frappe.utils.data.escape_html(project)
{"title": context.doc.project, "route": "/projects?project=" + context.doc.project} route = "/projects?" + urllib.parse.urlencode({"project": project})
] context.parents = [{"title": title, "route": route}]
context.success_url = "/projects?project=" + context.doc.project context.success_url = route