Skip to content

[pull] main from jquery:main#17

Merged
pull[bot] merged 10 commits into
TheRakeshPurohit:mainfrom
jquery:main
Jul 15, 2022
Merged

[pull] main from jquery:main#17
pull[bot] merged 10 commits into
TheRakeshPurohit:mainfrom
jquery:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented Jul 14, 2022

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

adalid-1 and others added 10 commits July 14, 2022 18:47
Replaces a call to the deprecated jQuery `.focus()` method
with `.trigger("focus")`.

Closes gh-2053
If you generate a Checkboxradio from a checkbox/radio with a label that
contains encoded HTML, e.g. `<em>test</em>` this will work fine
at first. If, however a refresh is triggered on that instance (explicitly or
e.g. by turning it into a `Controlgroup`), the previously escaped HTML will
now be evaluated.

If the label was created based on some user input, this could lead to
unexpected code execution even though the initial output was escaped.

Fixes gh-2101
Closes gh-2102
@pull pull Bot added the ⤵️ pull label Jul 15, 2022
@pull pull Bot merged commit 1f16dbb into TheRakeshPurohit:main Jul 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants