angular-ui/ui-select

unsafe:javascript:; multiselect (select2) breaks in strict Content Security Policy apps,

binaryhq opened this issue · 2 comments

binaryhq commented

Description:
multiselect (select2) breaks in strict Content Security Policy apps.
I'm using select2 theme of UI-SELECT with multiselect option. When i close selected item, it makes an browser to show alert message. related to this commit

I don't have plunker url, since we can not define strict content policy in plunker:

Angularjs1.7, UI-Select 0.18, and Select2 CSS

sweatC commented

Have the same issue.

seyon commented

I have the same Issue after upgrading AngularJs .

But i found an solution:
https://anotherdevblog.com/2018/06/27/angularjs-adds-unsafe-before-links/

You only need to allow "javascript" Protocol to href elements.

angular.module("app", []) .config(['$compileProvider', function ($compileProvider) { $compileProvider.aHrefSanitizationWhitelist(/^\s*(https?|ftp|mailto|javascript):/); }]);