Fix code scanning alert issue-#1357

OWASP-BLT · Nov 1, 2023 · a075b9e · a075b9e
1 parent 2e76c5d
commit a075b9e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/website/static/vendor/bootstrap/js/bootstrap.js b/website/static/vendor/bootstrap/js/bootstrap.js
@@ -713,8 +713,8 @@ function sanitizeInput(input) {
 
     function getTargetFromTrigger($trigger) {
         var href
-        var target = $trigger.attr('data-target')
-            || (href = $trigger.attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '') // strip for ie7
+        var target = sanitizeSelector($trigger.attr('data-target'))
+            || (href = sanitizeSelector($trigger.attr('href'))) && href.replace(/.*(?=#[^\s]+$)/, '') // strip for ie7
 
         return $(target)
     }