Fix code scanning alert issue-OWASP-BLT#1357

JisanAR03 · Oct 31, 2023 · b5c8edb · b5c8edb
1 parent 525973f
commit b5c8edb
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/website/static/vendor/bootstrap/js/bootstrap.js b/website/static/vendor/bootstrap/js/bootstrap.js
@@ -713,10 +713,9 @@ function sanitizeInput(input) {
 
     function getTargetFromTrigger($trigger) {
         var href
-        var target = $trigger.attr('data-target')
-            || (href = $trigger.attr('href')) && href.replace(/.*(?=#[^\s]+$)/, '') // strip for ie7
-
-        return $(target)
+        var targetValue = $trigger.attr('data-target') || $trigger.attr('href');
+        var sanitizedTarget = sanitizeSelector(targetValue.replace(/.*(?=#[^\s]+$)/, '')); // strip for ie7 and sanitize
+        return $(sanitizedTarget);
     }