Bootstrap 3.4.1 fixes another xss vulnerability https://github.com/twbs/bootstrap/releases/tag/v3.4.1