Skip to content
This repository was archived by the owner on Sep 5, 2024. It is now read-only.
This repository was archived by the owner on Sep 5, 2024. It is now read-only.

md-select violates CSP #6819

@Frank3K

Description

@Frank3K

The md-select directive violates CSP when an item is clicked and the select closes. Upon closing, there is still some remaining styling form the ink-ripple which is applied when the item is clicked. The following HTML is added to the DOM (new lines added for readability):

<div class="md-text ng-binding">some text value</div>
<div class="md-ripple-container" style="background-color: rgba(0, 0, 0, 0.0980392);">
<div class="md-ripple md-ripple-placed md-ripple-scaled md-ripple-active" style="left: 52px; top: 22px; width: 147.472px; height: 147.472px; border-color: rgb(0, 0, 0); background: rgb(0, 0, 0);">
</div>
</div>

Violating call in select.js.

References #6602, #6691, #6756.

Metadata

Metadata

Labels

P0: criticalCritical issues that must be addressed immediately.

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions