Index: openacs-4/packages/openacs-bootstrap3-theme/resources/lists/table-2third.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/openacs-bootstrap3-theme/resources/lists/table-2third.adp,v
diff -u -r1.1.2.2 -r1.1.2.3
--- openacs-4/packages/openacs-bootstrap3-theme/resources/lists/table-2third.adp	8 Oct 2016 08:36:21 -0000	1.1.2.2
+++ openacs-4/packages/openacs-bootstrap3-theme/resources/lists/table-2third.adp	6 Nov 2016 13:49:57 -0000	1.1.2.3
@@ -1,7 +1,3 @@
-<%
-security::csp::require -force script-src 'unsafe-inline';
-ns_log notice "list template table-2third.adp: should remove: script-src 'unsafe-inline' (onclick, ...)"
-%>
 <if @list_properties.page_size@ not nil>
 <!-- top pagination -->
   <noparse>
@@ -247,7 +243,10 @@
     <!-- list-button-bar-bottom div -->
     <div class="list-button-bar-bottom">
         <multiple name="bulk_actions">
-        <input type="submit" title="@bulk_actions.title@" onclick="@list_properties.bulk_action_click_function@('@list_properties.name@', '@bulk_actions.url@'); return false;" value="@bulk_actions.label@" class="button">
+	<% template::add_event_listener -id "$list_properties(name)-bulk_action-$bulk_actions(rownum)" -script [subst {
+	    $list_properties(bulk_action_click_function)('$list_properties(name)', '$bulk_actions(url)');
+	}] %>
+        <input type="submit" title="@bulk_actions.title@" id="@list_properties.name;literal@-bulk_action-@bulk_actions.rownum;literal@" value="@bulk_actions.label@" class="button">
         </multiple>
     </div>
     <!-- end of list-button-bar-bottom div -->