mirrors/bootstrap
2
0
Fork 0
mirror of https://github.com/tenrok/bootstrap.git synced 2026-05-21 13:24:08 +03:00
Code Activity

change tooltip/popover html default to false for xss safety net

Browse Source
This commit is contained in:
Jacob Thornton
2012-09-24 23:15:36 -07:00
parent ebf94c53a5
commit 003fcccceb
5 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/assets/js/bootstrap-tooltip.js
Vendored
+1 -1
View File
@@ -269,7 +269,7 @@
, trigger: 'hover'
, title: ''
, delay: 0
, html: true
, html: false
}
}(window.jQuery);
docs/assets/js/bootstrap.js
Vendored
+1 -1
View File
@@ -1231,7 +1231,7 @@
, trigger: 'hover'
, title: ''
, delay: 0
, html: true
, html: false
}
}(window.jQuery);
docs/assets/js/bootstrap.min.js
Vendored
+1 -1
View File
File diff suppressed because one or more lines are too long
js/bootstrap-tooltip.js
Vendored
+1 -1
View File
@@ -269,7 +269,7 @@
, trigger: 'hover'
, title: ''
, delay: 0
, html: true
, html: false
}
}(window.jQuery);
js/tests/unit/bootstrap-tooltip.js
Vendored
+2 -1
View File
@@ -37,10 +37,11 @@ $(function () {
tooltip.tooltip('hide')
})
test("should always allow html entities", function () {
test("should allow html entities", function () {
$.support.transition = false
var tooltip = $('<a href="#" rel="tooltip" title="<b>@fat</b>"></a>')
.appendTo('#qunit-fixture')
.tooltip({html: true})
.tooltip('show')
ok($('.tooltip b').length, 'b tag was inserted')