carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

fix ipgrapper exploit

master
Aevann 2023-09-07 15:06:02 +03:00
parent a4bc71d4e3
commit 06ac5df959
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
files/helpers/sanitize.py
View File

@ -795,8 +795,8 @@ def normalize_url(url):
return url
def validate_css(css):
if '@import' in css:
return False, "CSS @import statements are not allowed!"
if '@' in css:
return False, "CSS @ statements are not allowed!"
if '/*' in css:
return False, "CSS comments are not allowed!"