don't escape theme css but strip tags instead, so that css code containing html special characters isn't improperly escaped

This commit is contained in:
Gwendolyn 2024-03-29 14:01:03 +01:00
parent dc3137eee0
commit e5095ee595
2 changed files with 2 additions and 2 deletions

View file

@ -28,7 +28,7 @@
}
</style>
{% endif %}
<style>{{ active_theme.css }}</style>
<style>{{ active_theme.css | striptags | safe }}</style>
{% compress css %}
<link href="{% static 'fonts/fonts.css' %}" rel="stylesheet">
<link href="{% static 'bootstrap/css/bootstrap.css' %}" rel="stylesheet">

View file

@ -31,7 +31,7 @@
}
</style>
{% endif %}
<style id="c3nav-theme-vars">{{ active_theme.css }}</style>
<style id="c3nav-theme-vars">{{ active_theme.css | striptags | safe }}</style>
{{ themes|json_script:"c3nav-themes" }}
{{ active_theme_id|json_script:"c3nav-active-theme" }}
{% compress css %}