mirror_css/bootstrap
1
0
Fork 0
mirror of https://github.com/twbs/bootstrap.git synced 2025-08-20 12:21:35 +02:00
Code Issues Releases Wiki Activity

change tooltip/popover html default to false for xss safety net

Browse Source
This commit is contained in:
Jacob Thornton
2012-09-24 23:15:36 -07:00
parent ebf94c53a5
commit 003fcccceb
5 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
js/tests/unit/bootstrap-tooltip.js vendored
View File

@@ -37,10 +37,11 @@ $(function () {
tooltip.tooltip('hide')
})
test("should always allow html entities", function () {
test("should allow html entities", function () {
$.support.transition = false
var tooltip = $('<a href="#" rel="tooltip" title="<b>@fat</b>"></a>')
.appendTo('#qunit-fixture')
.tooltip({html: true})
.tooltip('show')
ok($('.tooltip b').length, 'b tag was inserted')