Fix #4678: Validate custom CSS.

* Make it an error to add invalid custom CSS to your account. * Add a fix script to remove custom CSS from all accounts with invalid CSS.
2022-01-15 23:20:15 -06:00
parent c455c08b2c
commit acf565be7b
8 changed files with 70 additions and 2 deletions
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -113,7 +113,7 @@ class UsersController < ApplicationController
  end

  def custom_style
-    @css = CurrentUser.user.custom_style
+    @custom_css = CurrentUser.user.custom_css
    expires_in 10.years
  end