diff options
| author | Johann-S <johann.servoire@gmail.com> | 2018-05-30 10:50:13 +0300 |
|---|---|---|
| committer | Johann-S <johann.servoire@gmail.com> | 2018-06-01 10:10:25 +0300 |
| commit | cc61edfa8af7b5ec9d4888c59bf94377e499b78b (patch) | |
| tree | 826959307ff80ee91cfcf09509c7146195bab1bf /js | |
| parent | 149096016f70fd815540d62c0989fd99cdc809e0 (diff) | |
fix(scrollspy): xss in target option
Diffstat (limited to 'js')
| -rw-r--r-- | js/src/scrollspy.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/js/src/scrollspy.js b/js/src/scrollspy.js index 091b320bd9..90905b05dd 100644 --- a/js/src/scrollspy.js +++ b/js/src/scrollspy.js @@ -115,7 +115,7 @@ const ScrollSpy = (($) => { this._scrollHeight = this._getScrollHeight() - const targets = $.makeArray($(this._selector)) + const targets = $.makeArray(document.querySelectorAll(this._selector)) targets .map((element) => { |