Fix XSS in data-target

2026-05-27 14:46:01 +03:00 · 2017-08-25 21:54:49 +02:00
parent ba6a6f1369
commit bcad4bcb5f
2 changed files with 5 additions and 1 deletions
@@ -117,7 +117,7 @@ const Util = (($) => {
      }

      try {
-        const $selector = $(selector)
+        const $selector = $(document).find(selector)
        return $selector.length > 0 ? selector : null
      } catch (error) {
        return null