From 1e91efc16c0d97d2ce294f2671b04991e7f30f9a Mon Sep 17 00:00:00 2001 From: SamTV12345 <40429738+samtv12345@users.noreply.github.com> Date: Sun, 18 Aug 2024 20:21:54 +0200 Subject: [PATCH] sec: Fixed unsafe jquery plugin --- src/static/js/vendors/farbtastic.ts | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/src/static/js/vendors/farbtastic.ts b/src/static/js/vendors/farbtastic.ts index d9a4d6311..d2a286a44 100644 --- a/src/static/js/vendors/farbtastic.ts +++ b/src/static/js/vendors/farbtastic.ts @@ -35,7 +35,7 @@ $._farbtastic = function (container, options) { fb.linkTo = function (callback) { // Unbind previous nodes if (typeof fb.callback == 'object') { - $(fb.callback).off('keyup').on('keyup', fb.updateValue); + $(document.body).find(fb.callback).off('keyup').on('keyup', fb.updateValue); } // Reset color @@ -46,7 +46,7 @@ $._farbtastic = function (container, options) { fb.callback = callback; } else if (typeof callback == 'object' || typeof callback == 'string') { - fb.callback = $(callback); + fb.callback = $(document.body).find(callback); fb.callback.on('keyup', fb.updateValue); if (fb.callback[0].value) { fb.setColor(fb.callback[0].value); @@ -357,13 +357,14 @@ $._farbtastic = function (container, options) { // Linked elements or callback if (typeof fb.callback == 'object') { // Set background/foreground color - $(fb.callback).css({ + $(document.body).find(fb.callback).css({ backgroundColor: fb.color, color: fb.invert ? '#fff' : '#000' }); + // Change linked value - $(fb.callback).each(function() { + $(document.body).find(fb.callback).each(function() { if ((typeof this.value == 'string') && this.value != fb.color) { this.value = fb.color; }