admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FCLT#54923 CVE-2015-9251; XSS prevented in jQuery 2.2.4

Browse Source 
svn path=/Website/trunk/; revision=39355
This commit is contained in:
Koen Reefman
2018-10-11 12:00:41 +00:00
parent 4890c30325
commit 021148fe1d
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
APPL/Localscripts/jquery.mobile.min.js vendored
View File

File diff suppressed because one or more lines are too long

8
APPL/PDA/mobile.js
View File

@@ -8,6 +8,14 @@
window.fcltmobile = 1;
// Fix voor CVE-2015-9251 in jQuery 2.2.4 (FCLT#54923)
// Prevent auto-execution of scripts when no explicit dataType was provided (See gh-2432)
jQuery.ajaxPrefilter( function( s ) {
if ( s.crossDomain ) {
s.contents.script = false;
}
} );
$(document).bind("mobileinit", function() {
// Enhancement to use history.replaceState in supported browsers,