Fix #4678: Validate custom CSS.
* Make it an error to add invalid custom CSS to your account. * Add a fix script to remove custom CSS from all accounts with invalid CSS.
This commit is contained in:
@@ -106,6 +106,7 @@ class User < ApplicationRecord
|
||||
validates :password, confirmation: true
|
||||
validates :comment_threshold, inclusion: { in: (-100..5) }
|
||||
validate :validate_enable_private_favorites, on: :update
|
||||
validate :validate_custom_css, if: :custom_style_changed?
|
||||
before_validation :normalize_blacklisted_tags
|
||||
before_create :promote_to_owner_if_first_user
|
||||
has_many :artist_versions, foreign_key: :updater_id
|
||||
@@ -601,6 +602,18 @@ class User < ApplicationRecord
|
||||
end
|
||||
end
|
||||
|
||||
concerning :CustomCssMethods do
|
||||
def custom_css
|
||||
CustomCss.new(custom_style)
|
||||
end
|
||||
|
||||
def validate_custom_css
|
||||
if !custom_css.valid?
|
||||
errors.add(:base, "Custom CSS contains a syntax error. Validate it with https://codebeautify.org/cssvalidate")
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
module SearchMethods
|
||||
def search(params)
|
||||
params = params.dup
|
||||
|
||||
Reference in New Issue
Block a user