diff --git a/jsdeps.json b/jsdeps.json
index af62050f4..53454801e 100644
--- a/jsdeps.json
+++ b/jsdeps.json
@@ -88,10 +88,10 @@
     {
       "lib": "bootstrap",
       "name": "Bootstrap",
-      "version": "4.2.1",
+      "version": "4.3.1",
       "url": "https://github.com/twbs/bootstrap/releases/download/v$v/bootstrap-$v-dist.zip",
       "dest": "skins/elastic/deps",
-      "sha1": "2c80550e423a2500a98d4efbc7d6374cf131495e",
+      "sha1": "ee9e9d6bbbb6181dc519778af2b38804a6aa62a4",
       "license": "MIT",
       "flat": true,
       "map": {
diff --git a/skins/elastic/ui.js b/skins/elastic/ui.js
index 2abdf5d0f..ecf063de2 100644
--- a/skins/elastic/ui.js
+++ b/skins/elastic/ui.js
@@ -3447,6 +3447,7 @@ function rcube_elastic_ui()
                     boundary: 'viewport',
                     html: true,
                     offset: '0,2',
+                    sanitize: false,
                     template: '<div class="popover select-menu" style="min-width: ' + min_width + 'px; max-width: ' + max_width + 'px">'
                         + '<div class="popover-header"></div>'
                         + '<div class="popover-body" style="max-height: ' + max_height + 'px"></div></div>'