From 651c8115f6de248c0ff2691a14699260c1a50db1 Mon Sep 17 00:00:00 2001
From: Jared Vititoe <jjvititoe1@gmail.com>
Date: Fri, 30 Jan 2026 23:51:29 -0500
Subject: [PATCH] Fix CSP violation by using event delegation for reply form
 buttons

---
 assets/js/ticket.js | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/assets/js/ticket.js b/assets/js/ticket.js
index 7d78f64..13355a0 100644
--- a/assets/js/ticket.js
+++ b/assets/js/ticket.js
@@ -1252,6 +1252,12 @@ document.addEventListener('DOMContentLoaded', function() {
             case 'reply-comment':
                 showReplyForm(parseInt(target.dataset.commentId), target.dataset.user);
                 break;
+            case 'close-reply':
+                closeReplyForm();
+                break;
+            case 'submit-reply':
+                submitReply(parseInt(target.dataset.parentId));
+                break;
             case 'edit-comment':
                 editComment(parseInt(target.dataset.commentId));
                 break;
@@ -1471,7 +1477,7 @@ function showReplyForm(commentId, userName) {
         <div class="reply-form-container" data-parent-id="${commentId}">
             <div class="reply-header">
                 <span>Replying to <span class="replying-to">@${userName}</span></span>
-                <button type="button" class="close-reply-btn" onclick="closeReplyForm()">Cancel</button>
+                <button type="button" class="close-reply-btn" data-action="close-reply">Cancel</button>
             </div>
             <textarea id="replyText" placeholder="Write your reply..."></textarea>
             <div class="reply-actions">
@@ -1480,7 +1486,7 @@ function showReplyForm(commentId, userName) {
                     <span>Markdown</span>
                 </label>
                 <div class="reply-buttons">
-                    <button type="button" class="btn btn-small" onclick="submitReply(${commentId})">Reply</button>
+                    <button type="button" class="btn btn-small" data-action="submit-reply" data-parent-id="${commentId}">Reply</button>
                 </div>
             </div>
         </div>