From 2d90d369bbc2bd2647620246c55cec8c4705e3d0 Mon Sep 17 00:00:00 2001 From: Johann-S Date: Wed, 30 May 2018 09:41:05 +0200 Subject: fix(tooltip): xss in container option --- js/src/tooltip.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'js/src') diff --git a/js/src/tooltip.js b/js/src/tooltip.js index ed10057ed..3d4e93f2b 100644 --- a/js/src/tooltip.js +++ b/js/src/tooltip.js @@ -273,7 +273,7 @@ const Tooltip = (($) => { const attachment = this._getAttachment(placement) this.addAttachmentClass(attachment) - const container = this.config.container === false ? document.body : $(this.config.container) + const container = this.config.container === false ? document.body : $(document).find(this.config.container) $(tip).data(this.constructor.DATA_KEY, this) -- cgit v1.2.3