ryg/royalnet
ryg/royalnet
1
Fork 0
mirror of https://github.com/RYGhub/royalnet.git synced 2024-11-24 03:54:20 +00:00
Code Activity

Merge remote-tracking branch 'origin/master'

Browse source
This commit is contained in:
Steffo 2018-06-07 11:50:50 +02:00
commit 440ee10fa5
2 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
templates/profile.html
View file

@ -1,13 +1,15 @@
{% extends 'base.html' %} {% extends 'base.html' %}
{% block pagetitle %} {% block pagetitle %}
Royal Games {{ royal.username }}
{% endblock %} {% endblock %}
{% block posthead %} {% block posthead %}
{% if css %} {% if css %}
<style> <style>
{{ css.css }} {% autoescape false %}
{{ css.css }}
{% endautoescape %}
</style> </style>
{% endif %} {% endif %}
{% endblock %} {% endblock %}

6
webserver.py
View file

@ -108,8 +108,12 @@ def page_setcss():
if user_id is None: if user_id is None:
abort(403) abort(403)
return return
css = request.form.get("css", "")
if "<style" in css:
abort(400)
return
if ccss is None: if ccss is None:
ccss = db.CustomCSS(royal_id=user_id, css=request.form.get("css", "")) ccss = db.CustomCSS(royal_id=user_id, css=css)
db_session.add(ccss) db_session.add(ccss)
else: else:
ccss.css = request.form.get("css", "") ccss.css = request.form.get("css", "")