Branch: refs/heads/stable-18.4.x Home: https://github.com/xwiki/xwiki-platform Commit: 0091ff7c24b37efb3e5a0f0639ef2630ebbb1b90 https://github.com/xwiki/xwiki-platform/commit/0091ff7c24b37efb3e5a0f0639ef2... Author: Michael Hamann <[email protected]> Date: 2026-06-17 (Wed, 17 Jun 2026) Changed paths: M xwiki-platform-core/xwiki-platform-bootstrap/src/main/js/tooltip.js Log Message: ----------- XWIKI-24494: Use DOMParser in bootstrap fork * Test document.implementation against expected type. * Use DOMParser if possible (supported since 2015) in order to avoid a DoS in case of document.implementation overriden. Patch originally developed by Bastien Roucariès <[email protected]> for Debian, licensed under the Expat (MIT) license: https://salsa.debian.org/js-team/twitter-bootstrap3/-/blob/4f43c83b282de01ee... Patch origin: https://salsa.debian.org/js-team/twitter-bootstrap3/-/blob/4f43c83b282de01ee... (cherry picked from commit 05658fe198dd21b06148d6c7da70231d3c65b599) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications