mirror of
https://github.com/twbs/bootstrap.git
synced 2025-08-09 23:26:40 +02:00
fix(scrollspy): xss in target option
This commit is contained in:
@@ -115,7 +115,7 @@ const ScrollSpy = (($) => {
|
|||||||
|
|
||||||
this._scrollHeight = this._getScrollHeight()
|
this._scrollHeight = this._getScrollHeight()
|
||||||
|
|
||||||
const targets = $.makeArray($(this._selector))
|
const targets = $.makeArray(document.querySelectorAll(this._selector))
|
||||||
|
|
||||||
targets
|
targets
|
||||||
.map((element) => {
|
.map((element) => {
|
||||||
|
Reference in New Issue
Block a user