fix(deferred_revenue): Escape account in query

(cherry picked from commit c7b3ae41d4)
2024-10-09 09:56:17 +02:00
parent a3e8cc6abe
commit 3d082c93bc
1 changed files with 1 additions and 1 deletions
--- a/erpnext/accounts/deferred_revenue.py
+++ b/erpnext/accounts/deferred_revenue.py
@@ -58,7 +58,7 @@ def build_conditions(process_type, account, company):
 	)

 	if account:
-		conditions += f"AND {deferred_account}='{account}'"
+		conditions += f"AND {deferred_account}='{frappe.db.escape(account)}'"
 	elif company:
 		conditions += f"AND p.company = {frappe.db.escape(company)}"