fix(tooltip): xss CVE-2018-14042

Fixes twbs#26628
don-spyker · Aug 10, 2018 · 7cfc6a9 · 7cfc6a9
1 parent 2b4597a
commit 7cfc6a9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/js/tooltip.js b/js/tooltip.js
@@ -204,7 +204,7 @@
         .addClass(placement)
         .data('bs.' + this.type, this)
 
-      this.options.container ? $tip.appendTo(this.options.container) : $tip.insertAfter(this.$element)
+      this.options.container ? $tip.appendTo($(document).find(this.options.container)) : $tip.insertAfter(this.$element)
       this.$element.trigger('inserted.bs.' + this.type)
 
       var pos          = this.getPosition()