carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

include "css" in error

master
Aevann 2023-03-11 23:55:40 +02:00
parent dead7b5b6e
commit 257a38548a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
files/helpers/sanitize.py
View File

@ -623,10 +623,10 @@ def normalize_url(url):
def validate_css(css):
if '@import' in css:
return False, "@import statements are not allowed!"
return False, "CSS @import statements are not allowed!"
if '/*' in css:
return False, "Comments are not allowed!"
return False, "CSS comments are not allowed!"
for i in css_url_regex.finditer(css):
url = i.group(1)