From 385cd6d45e5fb6d16bfda98b348ebf67fff1b63b Mon Sep 17 00:00:00 2001 From: npt-1707 Date: Mon, 25 May 2026 05:37:53 +0800 Subject: [PATCH] src/widgets/bootstrap-dropdown.js: fix XSS --- src/widgets/bootstrap-dropdown.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/widgets/bootstrap-dropdown.js b/src/widgets/bootstrap-dropdown.js index a1d51519f..75f8faf5c 100644 --- a/src/widgets/bootstrap-dropdown.js +++ b/src/widgets/bootstrap-dropdown.js @@ -118,7 +118,7 @@ selector = selector && /#/.test(selector) && selector.replace(/.*(?=#[^\s]*$)/, '') //strip for ie7 } - $parent = selector && $(selector) + $parent = selector && $(document).find(selector) if (!$parent || !$parent.length) $parent = $this.parent()