github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-26 10:13:45 +08:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

SECURITY: Limit height of pre/svg elements

Browse Source 
Ensures posts cannot have SVG or PRE elements that are too tall.
This commit is contained in:
Penar Musaraj 2023-11-09 13:47:26 +11:00 committed by Krzysztof Kotlarek
parent 2c45b949ea
commit 89a2e60706
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/assets/stylesheets/common/base/topic-post.scss
View File

@ -202,6 +202,10 @@
height: var(--calculated-height);
}
}
svg {
max-height: 2000px;
}
}
// add staff color
@ -1009,6 +1013,7 @@ aside.quote {
}
pre {
max-height: 2000px;
code {
word-wrap: normal;
display: block;