html form inside bootstrap popover not working

I'm trying to use a form inside a bootstrap popover. Some basic html works (text styling, buttons), but the form does not. (neither do onclick() javascript actions)

I tried several options, and could not find any solution online.

<!doctype html>
<html lang="en">
  <head>
    <!-- Required meta tags -->
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">

    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">

    <title>Hello, world!</title>
  </head>
  <body>

    <button type="button" class="btn btn-lg btn-danger" data-toggle="popover" data-html='true' data-content="
    <h3>This works</h3>
    <form>
    This does not:<br>
    <input type='text' name='firstname'><br>
    Last name:<br>
    <input type='text' name='lastname'>
    </form>
    ">popover with html form</button>

    <!-- Optional JavaScript -->
    <!-- jQuery first, then Popper.js, then Bootstrap JS -->
    <script src="https://code.jquery.com/jquery-3.3.1.slim.min.js" integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo" crossorigin="anonymous"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js" integrity="sha384-UO2eT0CpHqdSJQ6hJty5KVphtPhzWj9WO1clHTMGa3JDZwrnQq4sF86dIHNDz0W1" crossorigin="anonymous"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js" integrity="sha384-JjSmVgyd0p3pXB1rRibZUAYoIIy6OrQ6VrjIEaFf/nJGzIxFDsf4x0xIM+B07jRM" crossorigin="anonymous"></script>

    <script>
        $(function () {
            $('[data-toggle="popover"]').popover({
                html: true
            })
        })
    </script>
</body>
</html>

标签： jquery html twitter-bootstrap

2条回答

兄弟一词,经得起流年.

2楼-- · 2020-04-10 16:12

Your HTML is just fine and works (see example below.) The issue is a new flag needs to be set to allow HTML in the popover for BS 4.3.1

Per their release notes for that version is a breaking change:

"Security: Fixed an XSS vulnerability (CVE-2019-8331) in our tooltip and popover plugins by implementing a new HTML sanitizer"

See implementation of sanitize below in your example:

$(function() {
  $('[data-toggle="popover"]').popover({
    html: true,
sanitize: false,
  })
})

<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" rel="stylesheet" />
<script src="https://code.jquery.com/jquery-3.3.1.slim.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js"></script>

<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js"></script>




<button style="margin: 20px;" type="button" class="btn btn-lg btn-danger" data-toggle="popover" data-html='true' data-content="
    <h3>This works</h3>
    <form>
    This does too:<br>
    <input type='text' name='firstname'><br>
    Last name:<br>
    <input type='text' name='lastname'>
    </form>
    ">popover with html form</button>


<button style="margin: 20px;" type="button" class="btn btn-lg btn-info" data-toggle="popover" data-html='true' data-content="
    <h3>This works</h3>
    <form>
    This does duece:<br>
    <input type='text' name='firstname'><br>
    Last name:<br>
    <input type='text' name='lastname'>
    </form>
    ">Duece</button>

0人赞添加讨论(0) 举报

Viruses.

3楼-- · 2020-04-10 16:25

You can use content callback. In any case you need to insert your html into an hidden element, not into the button:

$('[data-toggle="popover"]').popover({
    html: true,
    content: function () {
        var content = $(this).attr("data-popover-content");
        return $(content).find(".popover-body").clone();
    }
})

<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css">
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js"></script>


<button type="button" class="btn btn-lg btn-danger" data-toggle="popover" data-html='true'
        data-popover-content="#yourContentHere">popover with html form
</button>

<div id="yourContentHere" style="display:none;">
    <div class="popover-body">
        <h3>This works</h3>

        <form>
            This does not:<br>
            <input type='text' name='firstname'><br>
            Last name:<br>
            <input type='text' name='lastname'>
        </form>
    </div>
</div>

0人赞添加讨论(0) 举报

html form inside bootstrap popover not working

采纳回答

编辑标签

举报内容

检举类型

检举原因

检举说明(必填)

打开微信“扫一扫”，打开网页后点击屏幕右上角分享按钮

付费偷看金额在0.1-10元之间