flâneur

In This Is All | Lapham’s Quarterly

laphamsquarterly.org · 1,025 words · saved by 1 readers

Memory, meaning, and the self.

] )[ 1 ].toLowerCase(); // It is not valid HTML for <option> or <optgroup> to have <select> as // either a descendant or sibling, and attempts to inject one can cause // XSS on jQuery versions before 3.5. Since this is invalid HTML and a // possible XSS attack, reject the entire string. // @see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023 if ((tag === 'option' tag === 'optgroup') && html.match(/</?select/i)) { html = ''; } // Retain jQuery's prior to 3.5 conversion of pseudo-XHTML, but for only // the tags in the `selfClosingTagsToReplace` list defined above. // @see https://g

related reading