twitter/bootstrap — pull request #2237 by notsobad (2012-02-24 16:05:49+00:00)
Title: Possible XSS in  bootstrap-tooltip.js

In bootstrap-tooltip.js, if your html looks like this:
test
when hover on it, will eval the js, popup an alert box about document.cookie.