github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-22 09:42:02 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Limit height of pre/svg elements

Browse Source 
Ensures posts cannot have SVG or PRE elements that are too tall.
This commit is contained in:
Penar Musaraj 2023-10-17 09:55:02 -04:00 committed by Krzysztof Kotlarek
parent d78357917c
commit 6183d9633d
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/assets/stylesheets/common/base/topic-post.scss
View File

@ -208,6 +208,10 @@
height: var(--calculated-height);
}
}
svg {
max-height: 2000px;
}
}
// add staff color
@ -1008,6 +1012,7 @@ aside.quote {
}
pre {
max-height: 2000px;
code {
word-wrap: normal;
display: block;