Skip to content
This repository has been archived by the owner on Oct 2, 2019. It is now read-only.

Commit

Permalink
fix(CSP): avoid inline execution of javascript in choices template.
Browse files Browse the repository at this point in the history
  • Loading branch information
Sjors committed Sep 8, 2015
1 parent bc3de20 commit fb88ec8
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions src/bootstrap/choices.tpl.html
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,9 @@
<li class="ui-select-choices-group" id="ui-select-choices-{{ $select.generatedId }}" >
<div class="divider" ng-show="$select.isGrouped && $index > 0"></div>
<div ng-show="$select.isGrouped" class="ui-select-choices-group-label dropdown-header" ng-bind="$group.name"></div>
<div id="ui-select-choices-row-{{ $select.generatedId }}-{{$index}}" class="ui-select-choices-row"
<div id="ui-select-choices-row-{{ $select.generatedId }}-{{$index}}" class="ui-select-choices-row"
ng-class="{active: $select.isActive(this), disabled: $select.isDisabled(this)}" role="option">
<a href="javascript:void(0)" class="ui-select-choices-row-inner"></a>
<a ng-click="$event.preventDefault()" class="ui-select-choices-row-inner"></a>
</div>
</li>
</ul>

0 comments on commit fb88ec8

Please sign in to comment.