Media, Updates: Avoid parsing selector values as HTML in admin scripts.

`wp.updates.addAdminNotice()`, `wp.media.transition()` and the attachment details frame's `focusNavButton()` pass a caller-supplied selector to `$()`, which parses a value that looks like HTML as markup. Select through `$( document ).find()` so the value is only ever treated as a selector.

This follows [64133] and the admin script changes in the same series.

Author: sirreal

src/js/_enqueues/wp/media/views.js

@@ -58,7 +58,7 @@ media.transition = function( selector, sensitivity ) {
 
 	if ( $.support.transition ) {
 		if ( ! (selector instanceof $) ) {
-			selector = $( selector );
+			selector = $( document ).find( selector );
 		}
 
 		// Resolve the deferred when the first element finishes animating.

src/js/_enqueues/wp/updates.js

@@ -253,7 +253,7 @@
 	 *
 	 */
 	wp.updates.addAdminNotice = function( data ) {
-		var $notice = $( data.selector ),
+		var $notice = $( document ).find( data.selector ),
 			$headerEnd = $( '.wp-header-end' ),
 			$adminNotice;
 

src/js/media/views/frame/edit-attachments.js

@@ -268,7 +268,7 @@ EditAttachments = MediaFrame.extend(/** @lends wp.media.view.MediaFrame.EditAtta
 	 * @param {string} which A CSS selector to target the button to focus.
 	 */
 	focusNavButton: function( which ) {
-		$( which ).trigger( 'focus' );
+		$( document ).find( which ).trigger( 'focus' );
 	},
 
 	getCurrentIndex: function() {