This repository was archived by the owner on Oct 2, 2019. It is now read-only.
Repository navigation
This repository was archived by the owner on Oct 2, 2019. It is now read-only.
unsafe:javascript:; multiselect (select2) breaks in strict Content Security Policy apps, #2174
Description
Description:
multiselect (select2) breaks in strict Content Security Policy apps.
I'm using select2 theme of UI-SELECT with multiselect option. When i close selected item, it makes an browser to show alert message. related to this commit
I don't have plunker url, since we can not define strict content policy in plunker:
Angularjs1.7, UI-Select 0.18, and Select2 CSS
Activity
sweatC commentedon Jan 14, 2019
Have the same issue.
Byte-Kitsune commentedon Apr 15, 2019
I have the same Issue after upgrading AngularJs .
But i found an solution:
https://anotherdevblog.com/2018/06/27/angularjs-adds-unsafe-before-links/
You only need to allow "javascript" Protocol to href elements.
angular.module("app", []) .config(['$compileProvider', function ($compileProvider) { $compileProvider.aHrefSanitizationWhitelist(/^\s*(https?|ftp|mailto|javascript):/); }]);