Merge pull request #1 from arjunshibu/master

Security fix for Cross-Site Scripting Vulnerability in frappe-charts

src/js/charts/AxisChart.js

@@ -110,7 +110,7 @@ export default class AxisChart extends BaseChart {
 			let values = d.values;
 			let cumulativeYs = d.cumulativeYs || [];
 			return {
-				name: d.name,
+				name: d.name.replace(/<|>|&/g, (char) => char == '&' ? '&amp;' : char == '<' ? '&lt;' : '&gt;'),
 				index: i,
 				chartType: d.chartType,