Merge pull request #1958 from graingert/disable-drop-in-csp-environments

disable drop under CSP

src/bootstrap/select-multiple.tpl.html

@@ -16,7 +16,7 @@
            aria-expanded="{{$select.open}}"
            aria-label="{{$select.baseTitle}}"
            ng-class="{'spinner': $select.refreshing}"
-           ondrop="return false;">
+           data-disallow-drop=data-disallow-drop>
   </div>
   <div class="ui-select-choices"></div>
   <div class="ui-select-no-choice"></div>

src/select2/select-multiple.tpl.html

@@ -22,7 +22,7 @@
         ng-model="$select.search"
         ng-click="$select.activate()"
         style="width: 34px;"
-        ondrop="return false;">
+        data-disallow-drop=data-disallow-drop>
     </li>
   </ul>
   <div class="ui-select-dropdown select2-drop select2-with-searchbox select2-drop-active"

src/selectize/select-multiple.tpl.html

@@ -11,7 +11,7 @@
            ng-disabled="$select.disabled"
            aria-expanded="{{$select.open}}"
            aria-label="{{ $select.baseTitle }}"
-           ondrop="return false;">
+           data-disallow-drop=data-disallow-drop>
   </div>
   <div class="ui-select-choices"></div>
   <div class="ui-select-no-choice"></div>

src/uiSelectSortDirective.js

@@ -31,6 +31,10 @@ uis.directive('uiSelectSort', ['$timeout', 'uiSelectConfig', 'uiSelectMinErr', f
         }
       });
 
+      if (element.data('disallowDrop')) {
+        return;
+      }
+
       element.on('dragstart', function(event) {
         element.addClass(draggingClassName);