Pull request #1694: 无JIRA任务 jqueryXss漏洞https://cloud.tencent.com/developer/article/1638163

Merge in VISUAL/fineui from ~GUY/fineui:master to master

* commit '77dba3ec7f9ecebc87748edba2c7362296e2cd25':
  jqueryXss漏洞https://cloud.tencent.com/developer/article/1638163
  jqueryXss漏洞https://cloud.tencent.com/developer/article/1638163

src/core/platform/web/jquery/_jquery.js

@@ -4520,12 +4520,18 @@
 		// cleanData must set properties to undefined rather than use removeAttribute
 		div[ jQuery.expando ] = 1;
 		support.attributes = !div.getAttribute( jQuery.expando );
+
+		// Support: IE <=9 only
+		// IE <=9 replaces <option> tags with their contents when inserted outside of
+		// the select element.
+		div.innerHTML = "<option></option>";
+		support.option = !!div.lastChild;
 	} )();
 
 
 // We have to close these tags to support XHTML (#13200)
 	var wrapMap = {
-		option: [ 1, "<select multiple='multiple'>", "</select>" ],
+		// option: [ 1, "<select multiple='multiple'>", "</select>" ],
 		legend: [ 1, "<fieldset>", "</fieldset>" ],
 		area: [ 1, "<map>", "</map>" ],
 
@@ -4541,12 +4547,16 @@
 		_default: support.htmlSerialize ? [ 0, "", "" ] : [ 1, "X<div>", "</div>" ]
 	};
 
-// Support: IE8-IE9
-	wrapMap.optgroup = wrapMap.option;
+// // Support: IE8-IE9
+// 	wrapMap.optgroup = wrapMap.option;
 
 	wrapMap.tbody = wrapMap.tfoot = wrapMap.colgroup = wrapMap.caption = wrapMap.thead;
 	wrapMap.th = wrapMap.td;
 
+	// Support: IE <=9 only
+	if ( !support.option ) {
+		wrapMap.optgroup = wrapMap.option = [ 1, "<select multiple='multiple'>", "</select>" ];
+	}
 
 	function getAll( context, tag ) {
 		var elems, elem,