Branch: refs/heads/stable-18.5.x Home: https://github.com/xwiki/xwiki-platform Commit: b7390549a27b05a50d351d4d25ff7dab2c81083b https://github.com/xwiki/xwiki-platform/commit/b7390549a27b05a50d351d4d25ff7... Author: Michael Hamann <[email protected]> Date: 2026-06-17 (Wed, 17 Jun 2026) Changed paths: M xwiki-platform-core/xwiki-platform-bootstrap/src/main/node/js/tooltip.js Log Message: ----------- XWIKI-24494: Use DOMParser in bootstrap fork * Test document.implementation against expected type. * Use DOMParser if possible (supported since 2015) in order to avoid a DoS in case of document.implementation overriden. Patch originally developed by Bastien Roucariès <[email protected]> for Debian, licensed under the Expat (MIT) license: https://salsa.debian.org/js-team/twitter-bootstrap3/-/blob/4f43c83b282de01ee... Patch origin: https://salsa.debian.org/js-team/twitter-bootstrap3/-/blob/4f43c83b282de01ee... (cherry picked from commit 05658fe198dd21b06148d6c7da70231d3c65b599) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications