mirrors/bootstrap
2
0
Fork 0
mirror of https://github.com/tenrok/bootstrap.git synced 2026-06-08 17:22:31 +03:00
Code Activity

change tooltip/popover html default to false for xss safety net

Browse Source
This commit is contained in:
Jacob Thornton
2012-09-24 23:15:36 -07:00
parent ebf94c53a5
commit 003fcccceb
5 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
js/tests/unit/bootstrap-tooltip.js
Vendored
+2 -1
View File
@@ -37,10 +37,11 @@ $(function () {
tooltip.tooltip('hide')
})
test("should always allow html entities", function () {
test("should allow html entities", function () {
$.support.transition = false
var tooltip = $('<a href="#" rel="tooltip" title="<b>@fat</b>"></a>')
.appendTo('#qunit-fixture')
.tooltip({html: true})
.tooltip('show')
ok($('.tooltip b').length, 'b tag was inserted')