mirror of
https://github.com/tenrok/bootstrap.git
synced 2026-05-15 11:59:39 +03:00
fix(scrollspy): xss in target option
This commit is contained in:
+1
-1
@@ -115,7 +115,7 @@ const ScrollSpy = (($) => {
|
||||
|
||||
this._scrollHeight = this._getScrollHeight()
|
||||
|
||||
const targets = $.makeArray($(this._selector))
|
||||
const targets = $.makeArray(document.querySelectorAll(this._selector))
|
||||
|
||||
targets
|
||||
.map((element) => {
|
||||
|
||||
Reference in New Issue
Block a user