mirror of
https://github.com/discourse/discourse.git
synced 2025-02-25 18:55:32 -06:00
SECURITY: Limit height of pre/svg elements
Ensures posts cannot have SVG or PRE elements that are too tall.
This commit is contained in:
committed by
Krzysztof Kotlarek
parent
d78357917c
commit
6183d9633d
@@ -208,6 +208,10 @@
|
||||
height: var(--calculated-height);
|
||||
}
|
||||
}
|
||||
|
||||
svg {
|
||||
max-height: 2000px;
|
||||
}
|
||||
}
|
||||
|
||||
// add staff color
|
||||
@@ -1008,6 +1012,7 @@ aside.quote {
|
||||
}
|
||||
|
||||
pre {
|
||||
max-height: 2000px;
|
||||
code {
|
||||
word-wrap: normal;
|
||||
display: block;
|
||||
|
||||
Reference in New Issue
Block a user