From 2b4880b136751ee3895d0b54299f23844fed30f5 Mon Sep 17 00:00:00 2001
From: Thomas Grainger <tom@procensus.com>
Date: Wed, 5 Apr 2017 19:16:05 +0100
Subject: [PATCH] disable drop under CSP

---
 src/bootstrap/select-multiple.tpl.html | 2 +-
 src/select2/select-multiple.tpl.html   | 2 +-
 src/selectize/select-multiple.tpl.html | 2 +-
 src/uiSelectSortDirective.js           | 4 ++++
 4 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/src/bootstrap/select-multiple.tpl.html b/src/bootstrap/select-multiple.tpl.html
index 9faea9902..7df96a781 100644
--- a/src/bootstrap/select-multiple.tpl.html
+++ b/src/bootstrap/select-multiple.tpl.html
@@ -15,7 +15,7 @@
            aria-expanded="{{$select.open}}"
            aria-label="{{$select.baseTitle}}"
            ng-class="{'spinner': $select.refreshing}"
-           ondrop="return false;">
+           data-disallow-drop=data-disallow-drop>
   </div>
   <div ng-show="$select.open && $select.items.length > 0" class="ui-select-dropdown dropdown-menu">
     <div class="ui-select-header"></div>
diff --git a/src/select2/select-multiple.tpl.html b/src/select2/select-multiple.tpl.html
index 0aeccceb0..e62863727 100644
--- a/src/select2/select-multiple.tpl.html
+++ b/src/select2/select-multiple.tpl.html
@@ -22,7 +22,7 @@
         ng-model="$select.search"
         ng-click="$select.activate()"
         style="width: 34px;"
-        ondrop="return false;">
+        data-disallow-drop=data-disallow-drop>
     </li>
   </ul>
   <div class="ui-select-dropdown select2-drop select2-with-searchbox select2-drop-active"
diff --git a/src/selectize/select-multiple.tpl.html b/src/selectize/select-multiple.tpl.html
index c60ddb1aa..5545e23fc 100644
--- a/src/selectize/select-multiple.tpl.html
+++ b/src/selectize/select-multiple.tpl.html
@@ -11,7 +11,7 @@
            ng-disabled="$select.disabled"
            aria-expanded="{{$select.open}}"
            aria-label="{{ $select.baseTitle }}"
-           ondrop="return false;">
+           data-disallow-drop=data-disallow-drop>
   </div>
   <div ng-show="$select.open" class="ui-select-dropdown selectize-dropdown"
        ng-class="{'single': !$select.multiple, 'multi': $select.multiple}">
diff --git a/src/uiSelectSortDirective.js b/src/uiSelectSortDirective.js
index 43a546171..71aa0fb91 100644
--- a/src/uiSelectSortDirective.js
+++ b/src/uiSelectSortDirective.js
@@ -31,6 +31,10 @@ uis.directive('uiSelectSort', ['$timeout', 'uiSelectConfig', 'uiSelectMinErr', f
         }
       });
 
+      if (element.data('disallowDrop')) {
+        return;
+      }
+
       element.on('dragstart', function(event) {
         element.addClass(draggingClassName);