XSS possible in data-container property of tooltip #26628
Comments
|
Bug reports must include a live demo of the problem. Per our contributing guidelines, please create a reduced test case via CodePen or JS Bin and report back with your link, Bootstrap version, and specific browser and OS details. |
|
https://jsbin.com/bimipayoda/edit?html,output Browser: Chrome Version 66.0.3359.181 64x |
* fix(collapse): xss CVE-2018-14040 Fixes #26625 * fix(tooltip): xss CVE-2018-14042 Fixes #26628 * fix(tooltip): XSS on data-viewport attribute Fixes #27044 * fix(affix): XSS on target config Fixes #27045
|
during some tests in the Debian LTS security team, it was determined that Bootstrap 2.0.2, 3.2.0 and 3.3.7 are not affected by this issue. concerns were raised, however, that other similar vulnerabilities might be waiting in the codebase. in this email, Brian May identified other direct uses of element content that might trigger similar XSS issues. have those issues been audited more thoroughly to see if other components are equally vulnerable? thanks for any feedback. |
XSS possible in tooltip data-container attribute
data-container="<img src=1 onerror=alert(123) />"Bootstrap 4.1.1 in combination with JQuery 3.3.1
The text was updated successfully, but these errors were encountered: