Escape the text used in the observations

danimaribeiro · Jan 3, 2024 · 2b03edc · 2b03edc
1 parent 9e7bf68
commit 2b03edc
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/pytrustnfe/nfe/danfe.py b/pytrustnfe/nfe/danfe.py
@@ -7,6 +7,7 @@
 from io import BytesIO
 from textwrap import wrap
 import math
+from html import escape
 from decimal import Decimal
 
 from reportlab.lib import utils
@@ -1051,7 +1052,7 @@ def adicionais(self, oXML=None, tamanho_diminuir=0):
         observacoes = tagtext(oNode=el_infAdic, cTag="infCpl")
         if fisco:
             observacoes = fisco + " " + observacoes
-        P = Paragraph(observacoes, styles["Normal"])
+        P = Paragraph(escape(observacoes), styles["Normal"])
         w, h = P.wrap(128 * mm, 32 * mm)
         altura = (self.height - self.nlin - 5) * mm
         P.drawOn(self.canvas, (self.nLeft + 1) * mm, altura - h)

diff --git a/setup.py b/setup.py
@@ -2,7 +2,7 @@
 from setuptools import setup, find_packages
 
 
-VERSION = "2.0.1"
+VERSION = "2.0.2"
 
 
 setup(
-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     from setuptools import setup, find_packages
-    VERSION = "2.0.1"
+    VERSION = "2.0.2"
     setup(
@@ Expand Down @@