From 4dd0973fbd576c4e79073f98fa7f81e5c4e5edf7 Mon Sep 17 00:00:00 2001 From: Giovanni Pellerano Date: Sun, 18 Aug 2019 13:15:55 +0200 Subject: [PATCH] fix(CSP): avoid inline execution of styles in match and select-multiple templates (#2025) --- src/bootstrap/match.tpl.html | 4 ++-- src/select2/select-multiple.tpl.html | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/src/bootstrap/match.tpl.html b/src/bootstrap/match.tpl.html index 1dc23cd98..5ce3065cc 100644 --- a/src/bootstrap/match.tpl.html +++ b/src/bootstrap/match.tpl.html @@ -4,11 +4,11 @@ aria-label="{{ $select.baseTitle }} activate" ng-disabled="$select.disabled" ng-click="$select.activate()" - style="outline: 0;"> + ng-style="{'outline': '0'}"> {{$select.placeholder}} - diff --git a/src/select2/select-multiple.tpl.html b/src/select2/select-multiple.tpl.html index 540433e6c..2a763a3d7 100644 --- a/src/select2/select-multiple.tpl.html +++ b/src/select2/select-multiple.tpl.html @@ -21,7 +21,7 @@ ng-hide="$select.disabled" ng-model="$select.search" ng-click="$select.activate()" - style="width: 34px;" + ng-style="{'width': '34px'}" data-disallow-drop=data-disallow-drop>