ext/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-10-29 22:57:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(manufacturing): escape node values in BOM configurator tree

Browse Source
This commit is contained in:
Mihir Kandoi
2026-10-23 06:29:06 +00:00
parent 3ff83243a7
commit 18e4302b33
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
erpnext/public/js/bom_configurator/bom_configurator.bundle.js
+4 -4
View File
@@ -79,8 +79,8 @@ class BOMConfigurator {
},
onrender(node) {
const qty = node.data.qty || frm_obj.frm.doc.qty;
const uom = node.data.uom || frm_obj.frm.doc.uom;
const docname = node.data.name || frm_obj.frm.doc.name;
const uom = frappe.utils.escape_html(node.data.uom || frm_obj.frm.doc.uom);
const docname = frappe.utils.escape_html(node.data.name || frm_obj.frm.doc.name);
let amount = node.data.amount;
if (node.data.value === frm_obj.frm.doc.item_code) {
amount = frm_obj.frm.doc.raw_material_cost;
@@ -408,8 +408,8 @@ class BOMConfigurator {
node.data.qty = data.qty;
let uom = node.data.uom || this.frm.doc.uom;
$(node.parent.get(0))
.find(`[data-bom-qty-docname='${docname}']`)
.html(data.qty + " " + uom);
.find(`[data-bom-qty-docname="${CSS.escape(docname)}"]`)
.text(data.qty + " " + uom);
view.events.load_tree(r, node);
},
});