ryg/royalnet
ryg/royalnet
1
Fork 0
mirror of https://github.com/RYGhub/royalnet.git synced 2024-11-27 13:34:28 +00:00
Code Activity

Prevent injections

Browse source
This commit is contained in:
Steffo 2018-06-07 11:59:15 +02:00
parent 440ee10fa5
commit d6474a2f97
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
webserver.py
View file

@ -109,7 +109,7 @@ def page_setcss():
abort(403)
return
css = request.form.get("css", "")
if "<style" in css:
if "</style" in css:
abort(400)
return
if ccss is None: