Fix #4678: Validate custom CSS.

* Make it an error to add invalid custom CSS to your account. * Add a fix script to remove custom CSS from all accounts with invalid CSS.
2022-01-15 23:20:15 -06:00
parent c455c08b2c
commit acf565be7b
8 changed files with 70 additions and 2 deletions
--- a/app/views/users/custom_style.css.erb
+++ b/app/views/users/custom_style.css.erb
@@ -1 +1,3 @@
-<%= raw @css %>
+<% if @custom_css.valid? %>
+  <%= raw @custom_css.css %>
+<% end %>