silverstripe-framework/templates/forms/DropdownField.ss

<select $AttributesHTML>
<% loop Options %>
	<option value="$Value.XML"<% if Selected %> selected="selected"<% end_if %><% if Disabled %> disabled="disabled"<% end_if %>>$Title.XML</option>
<% end_loop %>
</select>
ENHANCEMENT Allowing custom attributes in (most) FormField implementations, which allows for HTML5 data attributes 2011-12-22 13:10:57 +01:00			`<select $AttributesHTML>`
MINOR Fixing use of <% control %> with <% with %> or <% loop %> as necessary. 2012-05-11 03:49:20 +02:00			`<% loop Options %>`
BUGFIX Escape HTML in DropdownField and ListboxField Fixes reflected XSS in Group titles when using in group selections (e.g. in "New Member" form). 2013-01-04 18:09:39 +01:00			`<option value="$Value.XML"<% if Selected %> selected="selected"<% end_if %><% if Disabled %> disabled="disabled"<% end_if %>>$Title.XML</option>`
MINOR Fixing use of <% control %> with <% with %> or <% loop %> as necessary. 2012-05-11 03:49:20 +02:00			`<% end_loop %>`
			`</select>`