doc/html/_static/jquery-3.2.1.js: Ajax: Mitigate possible XSS vulnerability

This commit is contained in:
npt-1707 2026-05-18 07:31:43 +08:00
parent df129c7ba3
commit 7e7e2f424d

View File

@ -8712,6 +8712,11 @@ function ajaxConvert( s, response, jqXHR, isSuccess ) {
// Convert response if prev dataType is non-auto and differs from current
} else if ( prev !== "*" && prev !== current ) {
// Mitigate possible XSS vulnerability (gh-2432)
if ( s.crossDomain && current === "script" ) {
continue;
}
// Seek a direct converter
conv = converters[ prev + " " + current ] || converters[ "* " + current ];