]> source.dussan.org Git - jquery-ui.git/commit
Tooltip: Escape the title attribute so that it's treated as text and not HTML. Fixes...
authorScott González <scott.gonzalez@gmail.com>
Tue, 27 Nov 2012 16:21:33 +0000 (11:21 -0500)
committerScott González <scott.gonzalez@gmail.com>
Tue, 27 Nov 2012 16:21:33 +0000 (11:21 -0500)
commitf2854408cce7e4b7fc6bf8676761904af9c96bde
treeff4b9d3cc46b42745eea842052fb415c700fca71
parent5fee6fd5000072ff32f2d65b6451f39af9e0e39e
Tooltip: Escape the title attribute so that it's treated as text and not HTML. Fixes #8861 - Tooltip: XSS vulnerability in default content.
demos/autocomplete/combobox.html
tests/unit/tooltip/tooltip_options.js
ui/jquery.ui.tooltip.js