github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-18 18:25:29 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Limit height of pre/svg elements

Browse Source 
Ensures posts cannot have SVG or PRE elements that are too tall.
This commit is contained in:
Penar Musaraj 2023-11-09 13:47:26 +11:00 committed by Krzysztof Kotlarek
parent 2c45b949ea
commit 89a2e60706
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/assets/stylesheets/common/base/topic-post.scss
View File

@ -202,6 +202,10 @@
height: var(--calculated-height); height: var(--calculated-height);
} }
} }
svg {
max-height: 2000px;
}
} }
// add staff color // add staff color
@ -1009,6 +1013,7 @@ aside.quote {
} }
pre { pre {
max-height: 2000px;
code { code {
word-wrap: normal; word-wrap: normal;
display: block; display: block;