Gusted 661d3d28e9 Prevent possible XSS when using jQuery (#18289) ...

In the case of misuse or misunderstanding from a developer whereby,
if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the
creation of a new element. Current usage is using hard-coded selectors
in the templates, but nobody prevents that from expanding to
user-controlled somehow.

2022-01-16 13:14:32 +08:00

369 B

Raw Blame History

View Raw