Merge branch 'main' into issue-OWASP-BLT#1517

JisanAR03 · Oct 31, 2023 · 2ec9975 · 2ec9975
2 parents fea6414 + 49ad22a
commit 2ec9975
Showing 1 changed file with 1 addition and 7 deletions.
diff --git a/website/static/vendor/bootstrap/js/bootstrap.js b/website/static/vendor/bootstrap/js/bootstrap.js
@@ -520,13 +520,7 @@ function sanitizeSelector(selector) {
     var clickHandler = function (e) {
         var href
         var $this = $(this)
-
-        // sanitizing the elements
-        var dataTarget = $this.attr('data-target');
-        var href = $this.attr('href');
-        var sanitizedDataTarget = escapeHTML(dataTarget);
-        var sanitizedHref = escapeHTML(href);
-        var $target = $(sanitizedDataTarget || sanitizedHref && sanitizedHref.replace(/.*(?=#[^\s]+$)/, ''));
+        var $target = $($(sanitizeSelector($this.attr('data-target'))) || ((href = sanitizeSelector($this.attr('href'))) && href.replace(/.*(?=#[^\s]+$)/, '')));
 
         if (!$target.hasClass('carousel')) return
         var options = $.extend({}, $target.data(), $this.data())