diff --git a/changedetectionio/blueprint/watchlist/templates/watch-overview.html b/changedetectionio/blueprint/watchlist/templates/watch-overview.html
index 133f2a06..e6ecab17 100644
--- a/changedetectionio/blueprint/watchlist/templates/watch-overview.html
+++ b/changedetectionio/blueprint/watchlist/templates/watch-overview.html
@@ -304,12 +304,13 @@ html[data-darkmode="true"] .watch-tag-list.tag-{{ class_name }} {
{%- endif -%}
- {%- if watch.get('restock') and watch['restock']['price'] != None -%}
- {%- if watch['restock']['price'] != None -%}
+ {%- if watch.get('restock') and watch['restock'].get('price') -%}
+ {%- if watch['restock']['price'] is number -%}
{{ watch['restock']['price']|format_number_locale if watch['restock'].get('price') else '' }} {{ watch['restock'].get('currency','') }}
- {%- endif -%}
+ {%- else -%}
+ {%- endif -%}
{%- elif not watch.has_restock_info -%}
{{ _('No information') }}
{%- endif -%}
diff --git a/changedetectionio/tests/test_security.py b/changedetectionio/tests/test_security.py
index 8355a1b0..a76944cc 100644
--- a/changedetectionio/tests/test_security.py
+++ b/changedetectionio/tests/test_security.py
@@ -40,6 +40,7 @@ def test_favicon(client, live_server, measure_memory_usage, datastore_path):
res = client.get(url_for('static_content', group='..', filename='__init__.py'))
assert res.status_code != 200
+
res = client.get(url_for('static_content', group='.', filename='../__init__.py'))
assert res.status_code != 200