From 47c666bdc7d5a8d5d2ab2fecd546cd09143b24de Mon Sep 17 00:00:00 2001 From: guy Date: Mon, 21 Dec 2020 16:43:22 +0800 Subject: [PATCH 1/2] =?UTF-8?q?jqueryXss=E6=BC=8F=E6=B4=9Ehttps://www.free?= =?UTF-8?q?buf.com/vuls/201762.html?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/core/platform/web/jquery/_jquery.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/platform/web/jquery/_jquery.js b/src/core/platform/web/jquery/_jquery.js index 578ce4eb7..000afa50c 100644 --- a/src/core/platform/web/jquery/_jquery.js +++ b/src/core/platform/web/jquery/_jquery.js @@ -213,7 +213,7 @@ copy = options[ name ]; // Prevent never-ending loop - if ( target === copy ) { + if ( name === "__proto__" || target === copy ) { continue; } From 2b1eac9f66533fb1c99226929bc220dea6273bf5 Mon Sep 17 00:00:00 2001 From: guy Date: Mon, 21 Dec 2020 16:43:51 +0800 Subject: [PATCH 2/2] =?UTF-8?q?jqueryXss=E6=BC=8F=E6=B4=9Ehttps://www.free?= =?UTF-8?q?buf.com/vuls/201762.html?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/core/platform/web/jquery/_jquery.js | 1 - 1 file changed, 1 deletion(-) diff --git a/src/core/platform/web/jquery/_jquery.js b/src/core/platform/web/jquery/_jquery.js index 000afa50c..48adf702e 100644 --- a/src/core/platform/web/jquery/_jquery.js +++ b/src/core/platform/web/jquery/_jquery.js @@ -5884,7 +5884,6 @@ var rinlinejQuery = / jQuery\d+="(?:null|\d+)"/g, rnoshimcache = new RegExp( "<(?:" + nodeNames + ")[\\s/>]", "i" ), - // rxhtmlTag = /<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:-]+)[^>]*)\/>/gi, // Support: IE 10-11, Edge 10240+ // In IE/Edge using regex groups here causes severe slowdowns.