Branch: refs/heads/stable-16.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 5125cadcd6caae16daf980558d795235c48364bf https://github.com/xwiki/xwiki-platform/commit/5125cadcd6caae16daf980558d795... Author: Michael Hamann <[email protected]> Date: 2026-06-17 (Wed, 17 Jun 2026) Changed paths: M xwiki-platform-core/xwiki-platform-bootstrap/src/main/js/tooltip.js Log Message: ----------- XWIKI-24494: Use DOMParser in bootstrap fork * Test document.implementation against expected type. * Use DOMParser if possible (supported since 2015) in order to avoid a DoS in case of document.implementation overriden. Patch originally developed by Bastien Roucariès <[email protected]> for Debian, licensed under the Expat (MIT) license: https://salsa.debian.org/js-team/twitter-bootstrap3/-/blob/4f43c83b282de01ee... Patch origin: https://salsa.debian.org/js-team/twitter-bootstrap3/-/blob/4f43c83b282de01ee... (cherry picked from commit 05658fe198dd21b06148d6c7da70231d3c65b599) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications