Fix code scanning alert issue-OWASP-BLT#1354

JisanAR03 · Nov 1, 2023 · 7b66142 · 7b66142
1 parent a075b9e
commit 7b66142
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/website/static/vendor/bootstrap/js/bootstrap.js b/website/static/vendor/bootstrap/js/bootstrap.js
@@ -1259,7 +1259,7 @@ function sanitizeInput(input) {
     $(document).on('click.bs.modal.data-api', '[data-toggle="modal"]', function (e) {
         var $this = $(this)
         var href = $this.attr('href')
-        var $target = $($this.attr('data-target') || (href && href.replace(/.*(?=#[^\s]+$)/, ''))) // strip for ie7
+        var $target = $((sanitizeSelector($this.attr('data-target'))) || (href && sanitizeSelector(href.replace(/.*(?=#[^\s]+$)/, ''))));
         var option = $target.data('bs.modal') ? 'toggle' : $.extend({remote: !/#/.test(href) && href}, $target.data(), $this.data())
 
         if ($this.is('a')) e.preventDefault()