]> source.dussan.org Git - jquery-ui.git/commit
projects / jquery-ui.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 85bed8d) | patch
Widget: Don't let widget name affect `$.ui` prototype & constructor
authorMichał Gołębiowski-Owczarek <m.goleb@gmail.com>
Wed, 30 Oct 2024 08:58:01 +0000 (09:58 +0100)
committerGitHub <noreply@github.com>
Wed, 30 Oct 2024 08:58:01 +0000 (09:58 +0100)
commitd591bdd494cf28a399ea7d7ae7ccbae3a5cab020
tree2792bb122dc90534685403f224e0cef18e685d15tree | snapshot
parent85bed8ddd893390fd41bd7e93d2a44a1b5d9b885commit | diff
Widget: Don't let widget name affect `$.ui` prototype & constructor

This is an edge case and it only affects code accepting untrusted input as
a widget name, but it's still technically correct to filter these out.

Closes gh-2310
tests/unit/widget/core.js diff | blob | history
ui/widget.js diff | blob | history
The official jQuery user interface library: https://github.com/jquery/jquery-ui