Merge branch 'main' into issue-OWASP-BLT#1345

JisanAR03 · Nov 1, 2023 · 5f867de · 5f867de
2 parents 9dcd161 + 3d056d0
commit 5f867de
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/website/static/vendor/bootstrap/js/bootstrap.js b/website/static/vendor/bootstrap/js/bootstrap.js
@@ -791,7 +791,7 @@ function sanitizeInput(input) {
     Dropdown.VERSION = '3.3.7'
 
     function getParent($this) {
-        var selector = $this.attr('data-target')
+        var selector = sanitizeSelector($this.attr('data-target'))
 
         if (!selector) {
             selector = $this.attr('href')
@@ -1328,7 +1328,7 @@ function sanitizeInput(input) {
         this.type = type
         this.$element = $(element)
         this.options = this.getOptions(options)
-        this.$viewport = this.options.viewport && $($.isFunction(this.options.viewport) ? this.options.viewport.call(this, this.$element) : (this.options.viewport.selector || this.options.viewport))
+        this.$viewport = this.options.viewport && $(sanitizeSelector($.isFunction(this.options.viewport) ? this.options.viewport.call(this, this.$element) : (this.options.viewport.selector || this.options.viewport)))
         this.inState = {click: false, hover: false, focus: false}
 
         if (this.$element[0] instanceof document.constructor && !this.options.selector) {