Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

twbs/bootstrap

              main @ 89c9aa8
            

Fixes

CVEs

HIGH

Peak severity

45.5%

Coverage

Highlights

Cross-Site Scripting (XSS): 7 prior fixes. Scrutinize any change in this area.

js/src/util/sanitizer.js: most-fixed (3 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site Scripting (XSS): The internal HTML sanitizer is critical for filtering dynamic tooltip and popover content. It has repeatedly suffered from stateful regex validation bugs (such as sharing regex instances with global flags or using stateful test methods), allowing attackers to craft payloads that bypass sanitization rules entirely.

Cross-Site Scripting (XSS): Tooltip and popover components historically render rich HTML payloads by default or accept unsanitized configuration options. Attackers can leverage attributes like data-viewport, data-container, and data-template to execute arbitrary scripts when the tooltip renders or when users interact with the component.

DOM-based XSS: Passing user-supplied or data-attribute-controlled selectors (such as the data-parent attribute) directly into the jQuery constructor causes jQuery to parse and execute HTML if the selector string begins with an HTML-like character. Querying elements via native selectors prevents this execution.