Gusted
661d3d28e9
Prevent possible XSS when using jQuery ( #18289 ) ...
In the case of misuse or misunderstanding from a developer whereby,
if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the
creation of a new element. Current usage is using hard-coded selectors
in the templates, but nobody prevents that from expanding to
user-controlled somehow.
2022-01-16 13:14:32 +08:00
2022-01-14 16:03:31 +01:00
2022-01-16 13:14:32 +08:00
2021-12-24 11:56:57 +08:00
2021-12-24 11:56:57 +08:00
2022-01-11 19:33:42 +08:00
2021-01-22 20:12:50 +01:00
2022-01-09 19:53:03 +08:00
2022-01-15 17:26:01 -05:00
2017-11-26 23:44:32 +02:00
2018-01-08 23:48:42 +01:00
2017-11-26 23:44:32 +02:00
2021-01-29 01:57:58 +01:00
2020-10-23 11:59:45 -04:00
2021-11-23 10:10:18 +08:00
2021-01-29 01:57:58 +01:00
2017-11-26 23:44:32 +02:00
2017-11-26 23:44:32 +02:00
2017-11-26 23:44:32 +02:00
2019-11-13 18:03:18 +00:00
2019-11-13 18:03:18 +00:00
2019-11-13 18:03:18 +00:00
2021-01-29 01:57:58 +01:00
2017-11-26 23:44:32 +02:00
2018-01-08 23:48:42 +01:00
2017-11-26 23:44:32 +02:00
2017-11-26 23:44:32 +02:00
2021-01-22 20:12:50 +01:00
2021-01-22 20:12:50 +01:00
2021-01-29 01:57:58 +01:00
2017-11-26 23:44:32 +02:00
2018-01-08 23:48:42 +01:00
2017-11-26 23:44:32 +02:00
2017-11-26 23:44:32 +02:00
2017-11-26 23:44:32 +02:00
2018-10-17 14:19:04 -04:00
2021-01-29 01:57:58 +01:00
661d3d28e9