Fix #12858: don't expose jQuery/Sizzle expandos

diff --git a/src/sizzle b/src/sizzle
index 5e6ae330a9ccb33fd343a0bdc73ed2b821767f9c..7ea8b52ed6f4e3026216037c00a24edd9fce4fff 160000 (submodule)
--- a/src/sizzle
+++ b/src/sizzle
@@ -1 +1 @@
-Subproject commit 5e6ae330a9ccb33fd343a0bdc73ed2b821767f9c
+Subproject commit 7ea8b52ed6f4e3026216037c00a24edd9fce4fff

diff --git a/test/unit/manipulation.js b/test/unit/manipulation.js
index 98e01123291520aef3e93a207c9d7b4db65ecdcf..6c37e51962a45b0808137e0c04d67de87745a1e8 100644 (file)
--- a/test/unit/manipulation.js
+++ b/test/unit/manipulation.js
@@ -1241,17 +1241,14 @@ test("jQuery.clone() (#8017)", function() {
        equal( main.childNodes.length, clone.childNodes.length, "Simple child length to ensure a large dom tree copies correctly" );
 });
 
-test("clone() (#8070)", function () {
+test("append to multiple elements (#8070)", function () {
        expect(2);
 
-       jQuery("<select class='test8070'></select><select class='test8070'></select>").appendTo("#qunit-fixture");
-       var selects = jQuery(".test8070");
+       var selects = jQuery("<select class='test8070'></select><select class='test8070'></select>").appendTo("#qunit-fixture");
        selects.append("<OPTION>1</OPTION><OPTION>2</OPTION>");
 
        equal( selects[0].childNodes.length, 2, "First select got two nodes" );
        equal( selects[1].childNodes.length, 2, "Second select got two nodes" );
-
-       selects.remove();
 });
 
 test("clone()", function() {
@@ -1614,6 +1611,18 @@ test("html(Function) with incoming value", function() {
        }).html().replace(/>/g, "&gt;"), " " + insert, "Verify escaped insertion." );
 });
 
+test("clone()/html() don't expose jQuery/Sizzle expandos (#12858)", function() {
+       expect(2);
+       var $content = jQuery("<div><b><i>text</i></b></div>").appendTo("#qunit-fixture"),
+               expected = /^<b><i>text<\/i><\/b>$/i;
+
+       // Attach jQuery and Sizzle data (the latter by conducting a non-qSA search)
+       $content.find(":nth-child(1):lt(4)").data( "test", true );
+
+       ok( expected.test( $content.clone( false )[0].innerHTML ), "clone()" );
+       ok( expected.test( $content.html() ), "html()" );
+});
+
 var testRemove = function(method) {
        var first = jQuery("#ap").children(":first");