fix(collapse): xss in parent option

2025-08-15 18:14:17 +02:00 · 2018-05-30 09:46:50 +02:00
parent 2d90d369bb
commit 149096016f
2 changed files with 15 additions and 1 deletions
--- a/js/src/collapse.js
+++ b/js/src/collapse.js
@@ -289,7 +289,7 @@ const Collapse = (($) => {
          parent = this._config.parent[0]
        }
      } else {
-        parent = $(this._config.parent)[0]
+        parent = document.querySelector(this._config.parent)
      }

      const selector =