github/jquery
1
1
Fork 0
mirror of https://github.com/jquery/jquery.git synced 2026-02-07 03:14:58 -05:00
Code Issues Packages Projects Releases Wiki Activity

Adjust jQuery('html') detection to only match when html starts with '<' (counting space characters). Fixes #11290

Browse Source
This commit is contained in:
timmywil
2012-06-20 11:19:24 -04:00
parent 286c4d91dd
commit 239fc86b01
2 changed files with 3 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/core.js
View File

@@ -40,9 +40,8 @@ var
trimRight = /\s+$/,
// A simple way to check for HTML strings
// Prioritize #id over <tag> to avoid XSS via location.hash (#9521)
// Ignore html if within quotes "" '' or brackets/parens [] ()
rhtmlString = /^(?:[^#<\\]*(<[\w\W]+>)(?![^\[]*\])(?![^\(]*\))(?![^']*')(?![^"]*")[^>]*$)/,
// If starts-with '<'
rhtmlString = /^\s*(<[\w\W]+>)[^>]*$/,
// Match a standalone tag
rsingleTag = /^<(\w+)\s*\/?>(?:<\/\1>)?$/,