mirror of
https://github.com/twbs/bootstrap.git
synced 2025-08-09 07:06:36 +02:00
fix(scrollspy): xss in target option
This commit is contained in:
@@ -115,7 +115,7 @@ const ScrollSpy = (($) => {
|
||||
|
||||
this._scrollHeight = this._getScrollHeight()
|
||||
|
||||
const targets = $.makeArray($(this._selector))
|
||||
const targets = $.makeArray(document.querySelectorAll(this._selector))
|
||||
|
||||
targets
|
||||
.map((element) => {
|
||||
|
Reference in New Issue
Block a user