diff --git a/js/app/Config.js b/js/app/Config.js index bcc1391c8..6420facd5 100644 --- a/js/app/Config.js +++ b/js/app/Config.js @@ -33,6 +33,9 @@ app.config(function ($provide, $interpolateProvider, $httpProvider, $urlRouterPr $compileProvider.debugInfoEnabled(true); + // This should fix adding "unsafe:" prefix to ui-select href links containing javascript + // inline JS is blocked by CSP anyway and filtered out by our markdown renderer as well + $compileProvider.aHrefSanitizationWhitelist(/^\s*(https?|javascript):/); markdownItConverterProvider.use(markdownitLinkTarget, { breaks: true,