Fix XSS in data-target

2025-09-29 06:49:06 +02:00 · 2017-08-25 21:54:49 +02:00
parent ba6a6f1369
commit bcad4bcb5f
2 changed files with 5 additions and 1 deletions
--- a/js/src/util.js
+++ b/js/src/util.js
@@ -117,7 +117,7 @@ const Util = (($) => {
      }

      try {
-        const $selector = $(selector)
+        const $selector = $(document).find(selector)
        return $selector.length > 0 ? selector : null
      } catch (error) {
        return null