Naming consistance and SESSION issue

2026-05-08 12:04:10 +07:00
parent e4a35c7fac
commit 304848d3f4
18 changed files with 69 additions and 41 deletions
@@ -560,7 +560,7 @@
      onSuccess: function(res) {
        var opts = '<option value="0">— no invoice —</option>';
        $.each(res.output || [], function(i, inv) {
-          opts += `<option value="${inv.id}">${inv.invoice_number}</option>`;
+          opts += `<option value="${inv.id}">${escape_html(inv.invoice_number)}</option>`;
        });
        $('#invoice_id').html(opts);