carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

dont allow skew with scale

master
Aevann 2024-02-05 07:49:30 +02:00
parent e2e88ea9ce
commit 2559b1967c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
files/helpers/sanitize.py
View File

@ -39,7 +39,7 @@ allowed_styles = ['background-color', 'color', 'filter', 'font-weight', 'text-al
def allowed_attributes(tag, name, value):
if name == 'style':
if 'transform' in value.lower() and 'scale' in value.lower() and 'rotate' in value.lower():
if 'transform' in value.lower() and 'scale' in value.lower() and ('rotate' in value.lower() or 'skew' in value.lower()):
return False
return True