CSP errors caused by inline script

[rchdly]

I'm seeing CSP errors due to .ui-select-row-choices-inner elements having an href="javascript:void(0);" - inline scripts are not allowed by CSP.

I suggest using href="#" here and adding $event.preventDefault() to the select function.

[prayagverma]

This issue has been addressed by the pull request #1182

[wesleycho]

Closing as already fixed.

[graingert]

@wesleycho should be re-opened because there's yet more inline JS. #1958