sanitizing unsafe URL value javascript:;

Angular 2 final release.

I have my link as following with refers to the href=“javascript:;” my link

and i am getting following warning

WARNING: sanitizing unsafe URL value javascript:; (see http://g.co/ng/security#xss) I need my link to be javascript:; because if i make it ‘#’ or ‘’ it refreshes the page.

i am generating elements dynamically. they can have direct links or drop downs. if they link i use url to populate in href. if they drop down i make href as void(0); so clicking on it should not refresh the page.

I have read couple of posts where people report this issue to angular folks and they will fix it… any help is appreciated.

[pkozlowski-opensource]

I don’t think you want to trick sanitization here. If you are using a link that has a click event and it shouldn’t trigger navigation just prevent default action on the event, ex.:

• <a (click)="$event.preventDefault(); doSth()"> or even shorter
• <a (click)="!!doSth()">

[jsgoupil]

A link without a href tag is not considered clickable.

If the href attribute is absent, then the element does not define a link.

Firefox will be happy to not put the right cursor for <a> tags missing a href.