In the case of misuse or misunderstanding from a developer whereby, if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the creation of a new element. Current usage is using hard-coded selectors in the templates, but nobody prevents that from expanding to user-controlled somehow. |
||
|---|---|---|
| .. | ||
| ColorPicker.js | ||
| EasyMDE.js | ||
| ImagePaste.js | ||
| LabelEdit.js | ||
| MarkupContentPreview.js | ||
| ReactionSelector.js | ||
| SearchUserBox.js | ||
| WebHookEditor.js | ||