Comment 12 for bug 1940450

Revision history for this message
Seth Arnold (seth-arnold) wrote :

I inspected some of the python3-xstatic-bootstrap-scss package:

./python-xstatic-bootstrap-scss_3.3.7.1-5/xstatic/pkg/bootstrap_scss/data/js/bootstrap/tooltip.js

While the header sure looks related, I couldn't find *any* hints that the patch from https://github.com/twbs/bootstrap/pull/28236/commits/5efa9b531d25927b907e3fa24b818608bc38a2f0 is remotely related. If they are related, that file has changed pretty drastically in the meantime.

Jeremy, can I ask, how confident you are that that package contains a version of the bootstrap tooltips that needs to be updated to address this flaw? (I only found one user of this package, python3-vitrage-dashboard -- with just one user, it might also justify a similar "is this even an issue?" sort of check.)

Thanks