fix(scrollspy): xss in target option

cc61edfa · Johann-S · 14909601 · cc61edfa
Commit cc61edfa authored 6 years ago by Johann-S
Hide whitespace changes
Inline Side-by-side

Showing

with 1 addition and 1 deletion
+1 -1
--- a/js/src/scrollspy.js
+++ b/js/src/scrollspy.js
@@ -115,7 +115,7 @@ const ScrollSpy = (($) => {

      this._scrollHeight = this._getScrollHeight()

-      const targets = $.makeArray($(this._selector))
+      const targets = $.makeArray(document.querySelectorAll(this._selector))

      targets
        .map((element) => {