Prevent tagsinput select element to be submitted without a value when they are required

- This was allowing to submit private messages to the wrong recipient

diff --git a/view/js/friendica-tagsinput/friendica-tagsinput.js b/view/js/friendica-tagsinput/friendica-tagsinput.js
index e3db53df41a6b29d04358ba93ef4e528affcd487..45c00641fdb65bd672925969477a09b87e114045 100644 (file)
--- a/view/js/friendica-tagsinput/friendica-tagsinput.js
+++ b/view/js/friendica-tagsinput/friendica-tagsinput.js
@@ -165,7 +165,7 @@
 
       // add <option /> if item represents a value not present in one of the <select />'s options
       if (self.isSelect && !optionExists) {
-        var $option = $('<option selected>' + htmlEncode(itemText) + '</option>');
+        var $option = $('<option>' + htmlEncode(itemText) + '</option>');
         $option.data('item', item);
         $option.attr('value', itemValue);
         self.$element.append($option);
@@ -577,11 +577,6 @@
         tagsinput = new TagsInput(this, arg1);
         $(this).data('tagsinput', tagsinput);
         results.push(tagsinput);
-
-        if (this.tagName === 'SELECT') {
-          $('option', $(this)).attr('selected', 'selected');
-        }
-
         // Init tags from $(this).val()
         $(this).val($(this).val());
       } else if (!arg1 && !arg2) {

diff --git a/view/templates/acl/message_recipient.tpl b/view/templates/acl/message_recipient.tpl
index 07c22f449e4fee59fbf6472d18eab333a991f36f..2c74ed178e9e7b04d3a0d460fc86070dffb5dd4e 100644 (file)
--- a/view/templates/acl/message_recipient.tpl
+++ b/view/templates/acl/message_recipient.tpl
@@ -1,4 +1,4 @@
-<select name="recipient" class="form-control input-lg" id="recipient">
+<select name="recipient" class="form-control input-lg" id="recipient" required>
        {{foreach $contacts as $contact}}
                <option value="{{$contact.id}}"{{if $contact.id == $selected}} selected{{/if}}>{{$contact.name}}</option>
        {{/foreach}}
@@ -48,7 +48,9 @@
                        }
                });
 
+               {{if $selected}}
                // Import existing ACL into the tags input fields.
                $recipient_input.tagsinput('add', acl.get({{$selected}})[0]);
+               {{/if}}
        });
 </script>