github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-22 16:02:46 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Limit height of pre/svg elements

Browse Source 
Ensures posts cannot have SVG or PRE elements that are too tall.
This commit is contained in:
Penar Musaraj 2023-10-17 09:55:02 -04:00 committed by Krzysztof Kotlarek
parent d78357917c
commit 6183d9633d
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/assets/stylesheets/common/base/topic-post.scss
View File

@ -208,6 +208,10 @@
height: var(--calculated-height); height: var(--calculated-height);
} }
} }
svg {
max-height: 2000px;
}
} }
// add staff color // add staff color
@ -1008,6 +1012,7 @@ aside.quote {
} }
pre { pre {
max-height: 2000px;
code { code {
word-wrap: normal; word-wrap: normal;
display: block; display: block;