mirrors/bootstrap
2
0
Fork 0
mirror of https://github.com/tenrok/bootstrap.git synced 2026-06-05 16:42:29 +03:00
Code Activity

Fix XSS in Alert, Carousel, Collapse, Dropdown and Modal

Browse Source
This commit is contained in:
Johann-S
2017-08-26 11:43:06 +02:00
parent 4731b239b1
commit 29f9237f73
7 changed files with 23 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
js/tests/visual/collapse.html
+3 -1
View File
@@ -66,7 +66,9 @@
</div>
</div>
</div>
<button class="btn" data-toggle="collapse" data-target="<img src=x onerror=alert(0)>">
Collapse with an XSS
</button>
</div>
<!-- JavaScript Includes -->