fix(tab): remove xss

diff --git a/js/tab.js b/js/tab.js
index 990c25be50e0d0ddddba808119915d15fce934c3..4f9ad9ff9da9deb3b2c8695a095b6f166ec8b7b4 100644 (file)
--- a/js/tab.js
+++ b/js/tab.js
@@ -48,7 +48,7 @@
 
     if (showEvent.isDefaultPrevented() || hideEvent.isDefaultPrevented()) return
 
-    var $target = $(selector)
+    var $target = $(document).find(selector)
 
     this.activate($this.closest('li'), $ul)
     this.activate($target, $target.parent(), function () {