Gusted
661d3d28e9
Prevent possible XSS when using jQuery ( #18289 ) ...
In the case of misuse or misunderstanding from a developer whereby,
if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the
creation of a new element. Current usage is using hard-coded selectors
in the templates, but nobody prevents that from expanding to
user-controlled somehow.
2022-01-16 13:14:32 +08:00
2022-01-16 13:14:32 +08:00
2021-10-21 15:37:43 +08:00
2021-10-17 01:28:04 +08:00
2021-10-15 10:35:26 +08:00
2021-11-22 16:19:01 +08:00
2021-11-22 16:19:01 +08:00
2020-07-29 14:44:23 -04:00
2022-01-16 13:14:32 +08:00
2021-12-04 14:43:14 +08:00
2021-10-17 01:28:04 +08:00
2021-10-22 22:34:01 +08:00
2021-11-11 09:52:16 +08:00
2021-10-21 15:37:43 +08:00
2021-08-17 01:32:48 -04:00
2021-11-22 16:19:01 +08:00
2021-11-09 17:27:25 +08:00
2021-12-07 13:44:08 +08:00
2021-11-12 20:37:45 +08:00
2021-10-21 15:37:43 +08:00
2022-01-16 13:14:32 +08:00
2021-11-22 16:19:01 +08:00
2021-11-22 21:44:38 -05:00
2022-01-16 13:14:32 +08:00
2022-01-16 13:14:32 +08:00
2021-11-17 18:08:25 +00:00
2021-11-12 20:37:45 +08:00
2021-11-22 16:19:01 +08:00
2021-11-22 20:20:16 +08:00
2022-01-16 13:14:32 +08:00
2022-01-16 13:14:32 +08:00
2021-10-21 15:37:43 +08:00
2021-11-09 17:27:25 +08:00
2021-12-08 14:57:18 +08:00
2022-01-05 13:17:25 +01:00
2022-01-16 13:14:32 +08:00
2021-10-21 15:37:43 +08:00
2022-01-07 02:18:52 +01:00
2022-01-05 13:17:25 +01:00
2021-10-21 15:37:43 +08:00
2021-10-17 01:28:04 +08:00
2021-11-12 20:37:45 +08:00
2021-12-03 00:36:00 +08:00
2021-10-21 15:37:43 +08:00
2022-01-15 17:52:56 +01:00
2021-10-17 01:28:04 +08:00
2021-10-17 01:28:04 +08:00
661d3d28e9