fix sanitization for 1353

OWASP-BLT · Oct 31, 2023 · 4500aa9 · 4500aa9
1 parent 770242a
commit 4500aa9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/website/static/vendor/bootstrap/js/bootstrap.js b/website/static/vendor/bootstrap/js/bootstrap.js
@@ -1576,7 +1576,7 @@ function sanitizeSelector(selector) {
 
     Tooltip.prototype.setContent = function () {
         var $tip = this.tip()
-        var title = this.getTitle()
+        var title = escapeHTML(this.getTitle())
 
         $tip.find('.tooltip-inner')[this.options.html ? 'html' : 'text'](title)
         $tip.removeClass('fade in top bottom left right')