Added force_escape to the current report title in the report chooser template in the accounting application.

2020-08-07 09:46:37 +08:00 · 2020-08-07 09:46:37 +08:00 · 4eb2391fd8
commit 4eb2391fd8
parent 2805eb0774
1 changed files with 1 additions and 1 deletions
--- a/accounting/templates/accounting/include/report-chooser.html
+++ b/accounting/templates/accounting/include/report-chooser.html
@ -57,7 +57,7 @@ First written: 2020/7/9
  <button type="button" class="btn btn-primary dropdown-toggle" data-toggle="dropdown">
    <span class="d-none d-md-inline">
      <i class="{{ current_report_icon }}"></i>
-      {{ current_report_title }}
+      {{ current_report_title|force_escape }}
    </span>
    <span class="d-md-none">{{ _("Book")|force_escape }}</span>
  </button>