commit 0aeeb7e02c06714ba136c43d64391da1a740cd52
author rohitwaghchaure <rohitw1991@gmail.com> Mon Feb 12 11:44:39 2018 +0530
committer Nabin Hait <nabinhait@gmail.com> Mon Feb 12 11:44:39 2018 +0530
tree 2d2893a89fbbbfe91dd9b1394a89734dfb002bf5
parent caccd2289d57254ed7fdce0197ad9b7e7ae68e6e

[Fix] Item variant details report (#12869)

erpnext/stock/report/item_variant_details/item_variant_details.py

diff --git a/erpnext/stock/report/item_variant_details/item_variant_details.py b/erpnext/stock/report/item_variant_details/item_variant_details.py
index 67b6b5f..f1488f8 100644
--- a/erpnext/stock/report/item_variant_details/item_variant_details.py
+++ b/erpnext/stock/report/item_variant_details/item_variant_details.py
@@ -17,7 +17,7 @@
 
 	variant_results = frappe.db.sql("""select name from `tabItem`
 		where variant_of = %s""", item, as_dict=1)
-	variants = ",".join(['"' + variant['name'] + '"' for variant in variant_results])
+	variants = ",".join(['"' + frappe.db.escape(variant['name']) + '"' for variant in variant_results])
 
 	order_count_map = get_open_sales_orders_map(variants)
 	stock_details_map = get_stock_details_map(variants)